Linux kernel cryptographic accelerator driver Heap Buffer Overflow Unauthorized Access

The vulnerability of the sglsgenrset function in the drivers/crypto/hisilicon/zip/zipcrypto.c file of the Linux kernel’s cryptographic accelerator driver is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to...

PT-2022-35512 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to a mismatch in get/set sgl sge nr in the hisilicon/zip crypto module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...