CVE-2024-38579

Summary

In the Linux kernel, the following vulnerability has been resolved:

crypto: bcm - Fix pointer arithmetic

In spu2_dump_omd() value of ptr is increased by ciph_key_len instead of hash_iv_len which could lead to going beyond the buffer boundaries. Fix this bug by changing ciph_key_len to hash_iv_len.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < c256b616067bfd6d274c679c06986b78d2402434affected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < e719c8991c161977a67197775067ab456b518c7baffected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < ebed0d666fa709bae9e8cafa8ec6e7ebd1d318c6affected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < c69a1e4b419c2c466dd8c5602bdebadc353973ddaffected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < 49833a8da6407e7e9b532cc4054fdbcaf78f5fddaffected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < d0f14ae223c2421b334c1f1a9e48f1e809aee3a0affected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < c0082ee420639a97e40cae66778b02b341b005e5affected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < 3b7a40740f04e2f27114dfd6225c5e721dda9d57affected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < 2b3460cbf454c6b03d7429e9ffc4fe09322eb1a9affected
LinuxLinux4.11affected
LinuxLinux0 < 4.11unaffected
LinuxLinux4.19.316 <= 4.19.*unaffected
LinuxLinux5.4.278 <= 5.4.*unaffected
LinuxLinux5.10.219 <= 5.10.*unaffected
LinuxLinux5.15.161 <= 5.15.*unaffected
LinuxLinux6.1.93 <= 6.1.*unaffected
LinuxLinux6.6.33 <= 6.6.*unaffected
LinuxLinux6.8.12 <= 6.8.*unaffected
LinuxLinux6.9.3 <= 6.9.*unaffected
LinuxLinux6.10 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

Additional References

References