averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-07-08 18:13:59 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
3d4e15ef5ccbae9308675cd7ea4e243485bdfe97
linux-stable-mirror/crypto
T
History
Thorsten Blum c13c6e9de9 crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id 
[ Upstream commit df0845cf44 ]

Use check_add_overflow() to guard against potential integer overflows
when adding the binary blob lengths and the size of an asymmetric_key_id
structure and return ERR_PTR(-EOVERFLOW) accordingly. This prevents a
possible buffer overflow when copying data from potentially malicious
X.509 certificate fields that can be arbitrarily large, such as ASN.1
INTEGER serial numbers, issuer names, etc.

Fixes: 7901c1a8ef ("KEYS: Implement binary asymmetric key ID handling")
Signed-off-by: Thorsten Blum <thorsten.blum@linux.dev>
Reviewed-by: Lukas Wunner <lukas@wunner.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2026-01-19 13:09:24 +01:00
..
asymmetric_keys
crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
2026-01-19 13:09:24 +01:00
async_tx
…
842.c
…
acompress.c
…
adiantum.c
…
aead.c
crypto: aead,cipher - zeroize key buffer after use
2024-07-18 13:07:27 +02:00
aegis128-core.c
…
aegis128-neon-inner.c
…
aegis128-neon.c
…
aegis.h
…
aes_generic.c
…
aes_ti.c
…
af_alg.c
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
2025-10-02 13:39:13 +02:00
ahash.c
…
akcipher.c
crypto: akcipher - default implementation for setting a private key
2022-10-26 12:35:25 +02:00
algapi.c
Revert "crypto: api - Disallow identical driver names"
2024-05-02 16:24:47 +02:00
algboss.c
exit: Rename module_put_and_exit to module_put_and_kthread_exit
2024-04-10 16:18:55 +02:00
algif_aead.c
…
algif_hash.c
crypto: algif_hash - fix double free in hash_accept
2025-06-04 14:38:05 +02:00
algif_rng.c
…
algif_skcipher.c
…
ansi_cprng.c
…
anubis.c
…
api.c
crypto: api - Move cryptomgr soft dependency into algapi
2022-02-11 09:10:26 +01:00
arc4.c
…
authenc.c
crypto: authenc - Fix sleep in atomic context in decrypt_tail
2022-04-08 14:23:05 +02:00
authencesn.c
…
blake2b_generic.c
…
blowfish_common.c
…
blowfish_generic.c
…
camellia_generic.c
…
cast5_generic.c
…
cast6_generic.c
…
cast_common.c
…
cbc.c
…
ccm.c
…
cfb.c
…
chacha20poly1305.c
…
chacha_generic.c
…
cipher.c
crypto: aead,cipher - zeroize key buffer after use
2024-07-18 13:07:27 +02:00
cmac.c
…
compress.c
…
crc32_generic.c
…
crc32c_generic.c
…
crct10dif_common.c
…
crct10dif_generic.c
…
cryptd.c
crypto: cryptd - Use request context instead of stack for sub-request
2022-12-31 13:14:23 +01:00
crypto_engine.c
crypto: engine - fix crypto_queue backlog handling
2023-05-17 11:50:20 +02:00
crypto_null.c
crypto: null - Use spin lock instead of mutex
2025-05-02 07:44:34 +02:00
crypto_user_base.c
…
crypto_user_stat.c
…
ctr.c
…
cts.c
…
curve25519-generic.c
…
deflate.c
…
des_generic.c
…
dh_helper.c
…
dh.c
…
drbg.c
crypto: drbg - Only fail when jent is unavailable in FIPS mode
2023-05-11 23:00:27 +09:00
ecb.c
…
ecc_curve_defs.h
…
ecc.c
…
ecc.h
…
ecdh_helper.c
…
ecdh.c
crypto: ecdh - explicitly zeroize private_key
2024-07-05 09:14:43 +02:00
ecdsa.c
crypto: ecdsa - Fix module auto-load on add-key
2024-06-16 13:39:58 +02:00
ecdsasignature.asn1
…
echainiv.c
…
ecrdsa_defs.h
…
ecrdsa_params.asn1
…
ecrdsa_pub_key.asn1
…
ecrdsa.c
crypto: ecrdsa - Fix module auto-load on add_key
2024-06-16 13:39:58 +02:00
essiv.c
crypto: essiv - Check ssize for decryption and in-place encryption
2025-10-19 16:21:43 +02:00
fcrypt.c
…
fips.c
…
gcm.c
…
geniv.c
…
gf128mul.c
…
ghash-generic.c
…
hash_info.c
…
hmac.c
…
internal.h
…
jitterentropy-kcapi.c
…
jitterentropy.c
crypto: jitter - consider 32 LSB for APT
2022-01-27 11:04:31 +01:00
jitterentropy.h
…
Kconfig
crypto: blake2s - remove shash module
2022-08-17 14:24:19 +02:00
keywrap.c
…
khazad.c
…
kpp.c
…
lrw.c
crypto: lrw - Only add ecb if it is not already there
2025-06-27 11:05:10 +01:00
lz4.c
…
lz4hc.c
…
lzo-rle.c
crypto: lzo - Fix compression buffer overrun
2025-06-04 14:37:58 +02:00
lzo.c
crypto: lzo - Fix compression buffer overrun
2025-06-04 14:37:58 +02:00
Makefile
crypto: blake2s - remove shash module
2022-08-17 14:24:19 +02:00
md4.c
…
md5.c
…
michael_mic.c
…
nhpoly1305.c
…
ofb.c
…
pcbc.c
…
pcrypt.c
crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY
2024-12-14 19:50:44 +01:00
poly1305_generic.c
…
proc.c
…
ripemd.h
…
rmd160.c
…
rng.c
crypto: rng - Ensure set_ent is always present
2025-10-19 16:21:28 +02:00
rsa_helper.c
…
rsa-pkcs1pad.c
crypto: rsa-pkcs1pad - Use helper to set reqsize
2023-09-19 12:22:30 +02:00
rsa.c
…
rsaprivkey.asn1
…
rsapubkey.asn1
…
scatterwalk.c
…
scompress.c
crypto: scomp - fix req->dst buffer overflow
2024-01-25 14:52:35 -08:00
seed.c
…
seqiv.c
crypto: seqiv - Handle EBUSY correctly
2023-03-10 09:39:11 +01:00
serpent_generic.c
…
sha1_generic.c
…
sha3_generic.c
…
sha256_generic.c
…
sha512_generic.c
…
shash.c
…
simd.c
…
skcipher.c
…
sm2.c
…
sm2signature.asn1
…
sm3_generic.c
…
sm4_generic.c
…
streebog_generic.c
…
tcrypt.c
crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
2022-12-31 13:14:24 +01:00
tcrypt.h
…
tea.c
…
testmgr.c
crypto: blake2s - remove shash module
2022-08-17 14:24:19 +02:00
testmgr.h
crypto: testmgr - some more fixes to RSA test vectors
2025-03-13 12:50:48 +01:00
twofish_common.c
…
twofish_generic.c
…
vmac.c
…
wp512.c
…
xcbc.c
…
xor.c
crypto: xor - fix template benchmarking
2024-10-17 15:10:42 +02:00
xts.c
crypto: xts - Only add ecb if it is not already there
2025-06-27 11:05:10 +01:00
xxhash_generic.c
…
zstd.c
…