In the Linux kernel, the following vulnerability has been resolved:
crypto: marvell/cesa - Handle zero-length skcipher requests
Do not access random memory for zero-length skcipher requests. Just return 0.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 4.2 | 5.4.295 |
| linux / linux_kernel | 5.5 | 5.10.239 |
| linux / linux_kernel | 5.11 | 5.15.186 |
| linux / linux_kernel | 5.16 | 6.1.142 |
| linux / linux_kernel | 6.2 | 6.6.94 |
| linux / linux_kernel | 6.7 | 6.12.34 |
| linux / linux_kernel | 6.13 | 6.15.3 |
| debian / debian_linux | 11.0 | 11.0.x |