Lucene search

K
redhatcveRedhat.comRH:CVE-2023-52669
HistoryMay 18, 2024 - 2:09 a.m.

CVE-2023-52669

2024-05-1802:09:35
redhat.com
access.redhat.com
8
linux
kernel
s390/aes
buffer overread
vulnerability
fixed
ctr mode
crypto
mitigation

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

10.3%

In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn’t a whole block of data left. Fix this by using the actual length left and copy it into a buffer first for processing.