Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-43815
HistoryAug 17, 2024 - 9:21 a.m.

CVE-2024-43815 crypto: mxs-dcp - Ensure payload is zero when using key slot

2024-08-1709:21:38
Linux
github.com
1
linux kernel
mxs-dcp
aes
hardware key slots
stack memory
payload field zero.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

crypto: mxs-dcp - Ensure payload is zero when using key slot

We could leak stack memory through the payload field when running
AES with a key from one of the hardware’s key slots. Fix this by
ensuring the payload field is set to 0 in such cases.

This does not affect the common use case when the key is supplied
from main memory via the descriptor payload.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-43815