Herbert Xu 74a66fdb52 crypto: algif_aead - Fix minimum RX size check for decryption ...

commit 3d14bd48e3 upstream.

The check for the minimum receive buffer size did not take the
tag size into account during decryption.  Fix this by adding the
required extra length.

Reported-by: syzbot+aa11561819dc42ebbc7c@syzkaller.appspotmail.com
Reported-by: Daniel Pouzzner <douzzer@mega.nu>
Fixes: d887c52d6a ("crypto: algif_aead - overhaul memory management")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Eric Biggers <ebiggers@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-04-30 11:25:29 +02:00

..

asymmetric_keys

crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id

2026-01-19 13:11:28 +01:00

async_tx

…

842.c

…

acompress.c

…

adiantum.c

…

aead.c

…

aegis128-core.c

…

aegis128-neon-inner.c

…

aegis128-neon.c

…

aegis.h

…

aes_generic.c

…

aes_ti.c

…

af_alg.c

crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl

2026-04-30 11:25:29 +02:00

ahash.c

…

akcipher.c

…

algapi.c

…

algboss.c

…

algif_aead.c

crypto: algif_aead - Fix minimum RX size check for decryption

2026-04-30 11:25:29 +02:00

algif_hash.c

crypto: af_alg - zero initialize memory allocated via sock_kmalloc

2026-01-19 13:12:04 +01:00

algif_rng.c

crypto: af_alg - zero initialize memory allocated via sock_kmalloc

2026-01-19 13:12:04 +01:00

algif_skcipher.c

crypto: algif_aead - Revert to operating out-of-place

2026-04-30 11:25:28 +02:00

ansi_cprng.c

…

anubis.c

…

api.c

…

arc4.c

…

authenc.c

crypto: authenc - use memcpy_sglist() instead of null skcipher

2026-04-30 11:25:28 +02:00

authencesn.c

crypto: authencesn - Fix src offset when decrypting in-place

2026-04-30 11:25:29 +02:00

blake2b_generic.c

…

blake2s_generic.c

…

blowfish_common.c

…

blowfish_generic.c

…

camellia_generic.c

…

cast5_generic.c

…

cast6_generic.c

…

cast_common.c

…

cbc.c

…

ccm.c

…

cfb.c

…

chacha20poly1305.c

…

chacha_generic.c

…

cipher.c

…

cmac.c

…

compress.c

…

crc32_generic.c

…

crc32c_generic.c

…

crct10dif_common.c

…

crct10dif_generic.c

…

cryptd.c

…

crypto_engine.c

…

crypto_null.c

crypto: null - Use spin lock instead of mutex

2025-05-02 07:41:18 +02:00

crypto_user_base.c

…

crypto_user_stat.c

…

ctr.c

…

cts.c

…

curve25519-generic.c

…

deflate.c

…

des_generic.c

…

dh_helper.c

…

dh.c

…

drbg.c

…

ecb.c

…

ecc_curve_defs.h

…

ecc.c

…

ecc.h

…

ecdh_helper.c

…

ecdh.c

…

echainiv.c

…

ecrdsa_defs.h

…

ecrdsa_params.asn1

…

ecrdsa_pub_key.asn1

…

ecrdsa.c

…

essiv.c

crypto: essiv - Check ssize for decryption and in-place encryption

2025-10-29 14:01:10 +01:00

fcrypt.c

…

fips.c

…

gcm.c

…

geniv.c

…

gf128mul.c

…

ghash-generic.c

…

hash_info.c

…

hmac.c

…

internal.h

…

jitterentropy-kcapi.c

…

jitterentropy.c

…

jitterentropy.h

…

Kconfig

crypto: authenc - use memcpy_sglist() instead of null skcipher

2026-04-30 11:25:28 +02:00

keywrap.c

…

khazad.c

…

kpp.c

…

lrw.c

crypto: lrw - Only add ecb if it is not already there

2025-06-27 11:04:01 +01:00

lz4.c

…

lz4hc.c

…

lzo-rle.c

…

lzo.c

…

Makefile

…

md4.c

…

md5.c

…

michael_mic.c

…

nhpoly1305.c

…

ofb.c

…

pcbc.c

…

pcrypt.c

…

poly1305_generic.c

…

proc.c

…

ripemd.h

…

rmd128.c

…

rmd160.c

…

rmd256.c

…

rmd320.c

…

rng.c

crypto: rng - Ensure set_ent is always present

2025-10-29 14:01:03 +01:00

rsa_helper.c

…

rsa-pkcs1pad.c

…

rsa.c

…

rsaprivkey.asn1

…

rsapubkey.asn1

…

salsa20_generic.c

…

scatterwalk.c

crypto: scatterwalk - Backport memcpy_sglist()

2026-04-30 11:25:28 +02:00

scompress.c

…

seed.c

…

seqiv.c

crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

2026-01-19 13:11:53 +01:00

serpent_generic.c

…

sha1_generic.c

…

sha3_generic.c

…

sha256_generic.c

…

sha512_generic.c

…

shash.c

…

simd.c

…

skcipher.c

…

sm2.c

…

sm2signature.asn1

…

sm3_generic.c

…

sm4_generic.c

…

streebog_generic.c

…

tcrypt.c

…

tcrypt.h

…

tea.c

…

testmgr.c

…

testmgr.h

crypto: testmgr - some more fixes to RSA test vectors

2025-03-13 12:47:26 +01:00

tgr192.c

…

twofish_common.c

…

twofish_generic.c

…

vmac.c

…

wp512.c

…

xcbc.c

…

xor.c

…

xts.c

crypto: xts - Only add ecb if it is not already there

2025-06-27 11:04:01 +01:00

xxhash_generic.c

…

zstd.c

…