7.8

CVE-2026-80522

crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()

In the Linux kernel, the following vulnerability has been resolved:

crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()

Perform rctx->cryptlen calculation in tegra_gcm_do_one_req() the same way
it is done in tegra_ccm_crypt_init(). The current formulae may lead to a
crash if a caller does not call tegra_gcm_setauthsize() and so ctx->authsize
remains zero. Then a decrypt operation with incorrect rctx->cryptlen will
lead to a write beyound rctx->dst_sg buffer.

As a follow-up cleanup delete struct tegra_aead_ctx->authsize field since
it appears to be completely unused. Also simplify tegra_ccm_setauthsize()
and tegra_gcm_setauthsize() functions respectively.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0
Version < cd6991001bf0681ed0bcf21f9cc3d261d749b2bb
Status affected
Version 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0
Version < 99a18e1d979e0fad3aaf9c65ae6696897c1d9869
Status affected
Version 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0
Version < c6237834d9994de209cb90c7a2c461247bce8e90
Status affected
Version 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0
Version < 360f2974fcea49c61f6d6f81554741a9eeee7168
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.10
Status affected
Version 0
Version < 6.10
Status unaffected
Version <= 6.12.*
Version 6.12.105
Status unaffected
Version <= 6.18.*
Version 6.18.46
Status unaffected
Version <= 7.1.*
Version 7.1.10
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.028
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/cd6991001bf0681ed0bcf21f9cc3d261d749b2bb
https://git.kernel.org/stable/c/99a18e1d979e0fad3aaf9c65ae6696897c1d9869
https://git.kernel.org/stable/c/c6237834d9994de209cb90c7a2c461247bce8e90
https://git.kernel.org/stable/c/360f2974fcea49c61f6d6f81554741a9eeee7168