CVE-2024-35926 crypto: iaa - Fix async_disable descriptor leak

In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix asyncdisable descriptor leak The disableasync paths of iaacompress/decompress don't free idxd descriptors in the asyncdisable case. Currently this only happens in the testcases where req-dst is set to null. Add ...

CVE-2023-52612

A vulnerability was found in scomp component Linux Kernel causing a buffer overflow in the req-dst buffer. This occurred because the buffer size was not checked before copying data from scompscratch-dst, leading to potential overflow and DoS. Mitigation Mitigation for this issue is either not...

CVE-2023-52612: Buffer Copy without Checking Size of Input

In the Linux kernel, the following vulnerability has been resolved: crypto: scomp - fix req-dst buffer overflow The req-dst buffer size should be checked before copying from the scompscratch-dst to avoid req-dst buffer overflow problem...

PT-2024-14654

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow issue has been resolved in the Linux kernel. The problem occurs when copying from scomp scratch-dst to req-dst without checking the req-dst buffer size, leading to a...