Herbert Xu a4fe4eb580 crypto: af_alg - Cap AEAD AD length to 0x80000000 ...

commit e4c06479d7 upstream.

In order to prevent arithmetic overflows when checking the TX
buffer size, cap the associated data length to 0x80000000.

Reported-by: Yiming Qian <yimingqian591@gmail.com>
Fixes: 400c40cf78 ("crypto: algif - add AEAD support")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-06-01 17:39:31 +02:00

..

asymmetric_keys

crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id

2026-01-11 15:18:19 +01:00

async_tx

treewide: use get_random_bytes() when possible

2022-10-11 17:42:58 -06:00

842.c

…

acompress.c

…

adiantum.c

…

aead.c

crypto: aead,cipher - zeroize key buffer after use

2024-07-11 12:47:05 +02:00

aegis128-core.c

…

aegis128-neon-inner.c

…

aegis128-neon.c

…

aegis.h

…

aes_generic.c

…

aes_ti.c

…

af_alg.c

crypto: af_alg - Cap AEAD AD length to 0x80000000

2026-06-01 17:39:31 +02:00

ahash.c

…

akcipher.c

crypto: akcipher - default implementation for setting a private key

2022-09-09 16:18:33 +08:00

algapi.c

crypto: api - Fix liveliness check in crypto_alg_tested

2024-11-17 15:07:20 +01:00

algboss.c

…

algif_aead.c

crypto: algif_aead - Fix minimum RX size check for decryption

2026-04-30 11:19:11 +02:00

algif_hash.c

crypto: af_alg - zero initialize memory allocated via sock_kmalloc

2026-01-11 15:19:19 +01:00

algif_rng.c

crypto: af_alg - zero initialize memory allocated via sock_kmalloc

2026-01-11 15:19:19 +01:00

algif_skcipher.c

crypto: algif_aead - Revert to operating out-of-place

2026-04-30 11:19:11 +02:00

ansi_cprng.c

…

anubis.c

…

api.c

crypto: api - Add crypto_clone_tfm

2024-12-14 19:53:51 +01:00

arc4.c

…

aria_generic.c

crypto: aria - prepare generic module for optimized implementations

2022-09-24 16:14:44 +08:00

authenc.c

crypto: authenc - use memcpy_sglist() instead of null skcipher

2026-04-30 11:19:11 +02:00

authencesn.c

crypto: authencesn - reject short ahash digests during instance creation

2026-06-01 17:38:52 +02:00

blake2b_generic.c

…

blowfish_common.c

…

blowfish_generic.c

…

camellia_generic.c

…

cast5_generic.c

…

cast6_generic.c

…

cast_common.c

…

cbc.c

…

ccm.c

…

cfb.c

…

chacha20poly1305.c

…

chacha_generic.c

…

cipher.c

crypto: aead,cipher - zeroize key buffer after use

2024-07-11 12:47:05 +02:00

cmac.c

…

compress.c

…

crc32_generic.c

…

crc32c_generic.c

…

crc64_rocksoft_generic.c

…

crct10dif_common.c

…

crct10dif_generic.c

…

cryptd.c

crypto: cryptd - Use request context instead of stack for sub-request

2022-12-31 13:32:33 +01:00

crypto_engine.c

crypto: engine - fix crypto_queue backlog handling

2023-05-17 11:53:40 +02:00

crypto_null.c

crypto: null - Use spin lock instead of mutex

2025-05-02 07:47:01 +02:00

crypto_user_base.c

…

crypto_user_stat.c

…

ctr.c

…

cts.c

…

curve25519-generic.c

crypto: add __init/__exit annotations to init/exit funcs

2022-09-24 16:14:43 +08:00

deflate.c

…

des_generic.c

…

dh_helper.c

…

dh.c

crypto: add __init/__exit annotations to init/exit funcs

2022-09-24 16:14:43 +08:00

drbg.c

crypto: drbg - Only fail when jent is unavailable in FIPS mode

2023-05-11 23:03:21 +09:00

ecb.c

…

ecc_curve_defs.h

…

ecc.c

…

ecdh_helper.c

…

ecdh.c

crypto: ecdh - explicitly zeroize private_key

2024-07-05 09:31:49 +02:00

ecdsa.c

crypto: ecdsa - Fix module auto-load on add-key

2024-06-16 13:41:37 +02:00

ecdsasignature.asn1

…

echainiv.c

…

ecrdsa_defs.h

…

ecrdsa_params.asn1

…

ecrdsa_pub_key.asn1

…

ecrdsa.c

crypto: ecrdsa - Fix module auto-load on add_key

2024-06-16 13:41:37 +02:00

essiv.c

crypto: essiv - Check ssize for decryption and in-place encryption

2025-10-19 16:23:10 +02:00

fcrypt.c

…

fips.c

crypto: fips - make proc files report fips module name and version

2022-07-15 16:43:22 +08:00

gcm.c

…

geniv.c

…

gf128mul.c

…

ghash-generic.c

…

hash_info.c

…

hctr2.c

crypto: hctr2 - Add HCTR2 support

2022-06-10 16:40:17 +08:00

hmac.c

…

internal.h

crypto: api - Add crypto_clone_tfm

2024-12-14 19:53:51 +01:00

jitterentropy-kcapi.c

crypto: jitter - permanent and intermittent health errors

2023-05-24 17:32:38 +01:00

jitterentropy.c

crypto: jitter - correct health test during initialization

2023-07-19 16:21:42 +02:00

jitterentropy.h

crypto: jitter - permanent and intermittent health errors

2023-05-24 17:32:38 +01:00

Kconfig

crypto: authenc - use memcpy_sglist() instead of null skcipher

2026-04-30 11:19:11 +02:00

kdf_sp800108.c

…

keywrap.c

…

khazad.c

…

kpp.c

crypto: add crypto_has_kpp()

2022-08-02 17:14:47 -06:00

lrw.c

crypto: lrw - Only add ecb if it is not already there

2025-06-27 11:07:06 +01:00

lz4.c

…

lz4hc.c

…

lzo-rle.c

crypto: lzo - Fix compression buffer overrun

2025-06-04 14:40:08 +02:00

lzo.c

crypto: lzo - Fix compression buffer overrun

2025-06-04 14:40:08 +02:00

Makefile

crypto: aria - prepare generic module for optimized implementations

2022-09-24 16:14:44 +08:00

md4.c

…

md5.c

…

michael_mic.c

…

nhpoly1305.c

…

ofb.c

…

pcbc.c

…

pcrypt.c

crypto: pcrypt - Fix handling of MAY_BACKLOG requests

2026-06-01 17:38:45 +02:00

poly1305_generic.c

…

polyval-generic.c

crypto: x86/polyval - Add PCLMULQDQ accelerated implementation of POLYVAL

2022-06-10 16:40:17 +08:00

proc.c

…

ripemd.h

…

rmd160.c

…

rng.c

crypto: rng - Ensure set_ent is always present

2025-10-15 11:56:24 +02:00

rsa_helper.c

…

rsa-pkcs1pad.c

crypto: rsa-pkcs1pad - Use helper to set reqsize

2023-09-13 09:42:26 +02:00

rsa.c

crypto: add __init/__exit annotations to init/exit funcs

2022-09-24 16:14:43 +08:00

rsaprivkey.asn1

…

rsapubkey.asn1

…

scatterwalk.c

crypto: scatterwalk - Backport memcpy_sglist()

2026-04-30 11:19:10 +02:00

scompress.c

crypto: scomp - fix req->dst buffer overflow

2024-01-25 15:27:23 -08:00

seed.c

…

seqiv.c

crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

2026-01-11 15:19:00 +01:00

serpent_generic.c

…

sha1_generic.c

…

sha3_generic.c

…

sha256_generic.c

…

sha512_generic.c

…

shash.c

crypto: add crypto_has_shash()

2022-08-02 17:14:47 -06:00

simd.c

crypto: simd - Do not call crypto_alloc_tfm during registration

2024-10-17 15:21:39 +02:00

skcipher.c

…

sm2.c

crypto: add __init/__exit annotations to init/exit funcs

2022-09-24 16:14:43 +08:00

sm2signature.asn1

…

sm3_generic.c

…

sm3.c

…

sm4_generic.c

…

sm4.c

…

streebog_generic.c

…

tcrypt.c

crypto: tcrypt - Fix multibuffer skcipher speed test mem leak

2022-12-31 13:32:34 +01:00

tcrypt.h

…

tea.c

…

testmgr.c

crypto: testmgr - fix RNG performance in fuzz tests

2023-05-24 17:32:53 +01:00

testmgr.h

crypto: testmgr - some more fixes to RSA test vectors

2022-07-22 16:22:04 +08:00

twofish_common.c

crypto: twofish - Fix comment typo

2022-07-22 16:22:04 +08:00

twofish_generic.c

…

vmac.c

…

wp512.c

…

xcbc.c

…

xctr.c

…

xor.c

crypto: xor - fix template benchmarking

2024-10-17 15:20:36 +02:00

xts.c

crypto: xts - Only add ecb if it is not already there

2025-06-27 11:07:06 +01:00

xxhash_generic.c

…

zstd.c

…