Linux Distros Unpatched Vulnerability : CVE-2022-48629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in...

openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2024:1332-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-48629

creationtimestamp| type| source ---|---|--- 2024-03-05 13:28:08+00:00| seen| https://t.me/ctinow/200210 2024-03-05 13:28:25+00:00| seen| https://t.me/ctinow/200224 2024-03-05 19:16:10+00:00| seen| https://t.me/ctinow/200595 2025-02-14 21:08:30+00:00| published-proof-of-concept|...

CVE-2022-48629

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rngalg expects that the destination buffer is completely filled if the function returns 0. qcomrngread can run into a situation...

CVE-2022-48629

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rngalg expects that the destination buffer is completely filled if the function returns 0. qcomrngread can run into a situation...

CVE-2022-48629 crypto: qcom-rng - ensure buffer for generate is completely filled

In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rngalg expects that the destination buffer is completely filled if the function returns 0. qcomrngread can run into a situation...

CVE-2022-48629

CVE-2022-48629 concerns the Linux kernel crypto/qcom-rng implementation. The issue arises when the RNG generate function can leave part of the destination buffer zeroed if qcom_rng_read() returns a success but qcom_rng_generate() does not verify the value, causing the destination to be only parti...