Herbert XuandGreg Kroah-Hartman fd427dd84f crypto: algif_aead - Fix minimum RX size check for decryption ...

commit 3d14bd48e3 upstream.

The check for the minimum receive buffer size did not take the
tag size into account during decryption.  Fix this by adding the
required extra length.

Reported-by: syzbot+aa11561819dc42ebbc7c@syzkaller.appspotmail.com
Reported-by: Daniel Pouzzner <douzzer@mega.nu>
Fixes: d887c52d6a ("crypto: algif_aead - overhaul memory management")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Eric Biggers <ebiggers@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-04-30 11:24:38 +02:00

..

asymmetric_keys

crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id

2026-01-19 13:09:24 +01:00

async_tx

…

842.c

…

acompress.c

…

adiantum.c

…

aead.c

crypto: aead,cipher - zeroize key buffer after use

2024-07-18 13:07:27 +02:00

aegis128-core.c

…

aegis128-neon-inner.c

…

aegis128-neon.c

…

aegis.h

…

aes_generic.c

…

aes_ti.c

…

af_alg.c

crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl

2026-04-30 11:24:38 +02:00

ahash.c

…

akcipher.c

crypto: akcipher - default implementation for setting a private key

2022-10-26 12:35:25 +02:00

algapi.c

Revert "crypto: api - Disallow identical driver names"

2024-05-02 16:24:47 +02:00

algboss.c

exit: Rename module_put_and_exit to module_put_and_kthread_exit

2024-04-10 16:18:55 +02:00

algif_aead.c

crypto: algif_aead - Fix minimum RX size check for decryption

2026-04-30 11:24:38 +02:00

algif_hash.c

crypto: af_alg - zero initialize memory allocated via sock_kmalloc

2026-01-19 13:10:08 +01:00

algif_rng.c

crypto: af_alg - zero initialize memory allocated via sock_kmalloc

2026-01-19 13:10:08 +01:00

algif_skcipher.c

crypto: algif_aead - Revert to operating out-of-place

2026-04-30 11:24:38 +02:00

ansi_cprng.c

…

anubis.c

…

api.c

crypto: api - Move cryptomgr soft dependency into algapi

2022-02-11 09:10:26 +01:00

arc4.c

…

authenc.c

crypto: authenc - use memcpy_sglist() instead of null skcipher

2026-04-30 11:24:38 +02:00

authencesn.c

crypto: authencesn - Fix src offset when decrypting in-place

2026-04-30 11:24:38 +02:00

blake2b_generic.c

…

blowfish_common.c

…

blowfish_generic.c

…

camellia_generic.c

…

cast5_generic.c

…

cast6_generic.c

…

cast_common.c

…

cbc.c

…

ccm.c

…

cfb.c

…

chacha20poly1305.c

…

chacha_generic.c

…

cipher.c

crypto: aead,cipher - zeroize key buffer after use

2024-07-18 13:07:27 +02:00

cmac.c

…

compress.c

…

crc32_generic.c

…

crc32c_generic.c

…

crct10dif_common.c

…

crct10dif_generic.c

…

cryptd.c

crypto: cryptd - Use request context instead of stack for sub-request

2022-12-31 13:14:23 +01:00

crypto_engine.c

crypto: engine - fix crypto_queue backlog handling

2023-05-17 11:50:20 +02:00

crypto_null.c

crypto: null - Use spin lock instead of mutex

2025-05-02 07:44:34 +02:00

crypto_user_base.c

…

crypto_user_stat.c

…

ctr.c

…

cts.c

…

curve25519-generic.c

…

deflate.c

…

des_generic.c

…

dh_helper.c

…

dh.c

…

drbg.c

crypto: drbg - Only fail when jent is unavailable in FIPS mode

2023-05-11 23:00:27 +09:00

ecb.c

…

ecc_curve_defs.h

…

ecc.c

…

ecc.h

…

ecdh_helper.c

…

ecdh.c

crypto: ecdh - explicitly zeroize private_key

2024-07-05 09:14:43 +02:00

ecdsa.c

crypto: ecdsa - Fix module auto-load on add-key

2024-06-16 13:39:58 +02:00

ecdsasignature.asn1

…

echainiv.c

…

ecrdsa_defs.h

…

ecrdsa_params.asn1

…

ecrdsa_pub_key.asn1

…

ecrdsa.c

crypto: ecrdsa - Fix module auto-load on add_key

2024-06-16 13:39:58 +02:00

essiv.c

crypto: essiv - Check ssize for decryption and in-place encryption

2025-10-19 16:21:43 +02:00

fcrypt.c

…

fips.c

…

gcm.c

…

geniv.c

…

gf128mul.c

…

ghash-generic.c

…

hash_info.c

…

hmac.c

…

internal.h

…

jitterentropy-kcapi.c

…

jitterentropy.c

crypto: jitter - consider 32 LSB for APT

2022-01-27 11:04:31 +01:00

jitterentropy.h

…

Kconfig

crypto: authenc - use memcpy_sglist() instead of null skcipher

2026-04-30 11:24:38 +02:00

keywrap.c

…

khazad.c

…

kpp.c

…

lrw.c

crypto: lrw - Only add ecb if it is not already there

2025-06-27 11:05:10 +01:00

lz4.c

…

lz4hc.c

…

lzo-rle.c

crypto: lzo - Fix compression buffer overrun

2025-06-04 14:37:58 +02:00

lzo.c

crypto: lzo - Fix compression buffer overrun

2025-06-04 14:37:58 +02:00

Makefile

crypto: blake2s - remove shash module

2022-08-17 14:24:19 +02:00

md4.c

…

md5.c

…

michael_mic.c

…

nhpoly1305.c

…

ofb.c

…

pcbc.c

…

pcrypt.c

crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY

2024-12-14 19:50:44 +01:00

poly1305_generic.c

…

proc.c

…

ripemd.h

…

rmd160.c

…

rng.c

crypto: rng - Ensure set_ent is always present

2025-10-19 16:21:28 +02:00

rsa_helper.c

…

rsa-pkcs1pad.c

crypto: rsa-pkcs1pad - Use helper to set reqsize

2023-09-19 12:22:30 +02:00

rsa.c

…

rsaprivkey.asn1

…

rsapubkey.asn1

…

scatterwalk.c

crypto: scatterwalk - Backport memcpy_sglist()

2026-04-30 11:24:37 +02:00

scompress.c

crypto: scomp - fix req->dst buffer overflow

2024-01-25 14:52:35 -08:00

seed.c

…

seqiv.c

crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

2026-01-19 13:09:55 +01:00

serpent_generic.c

…

sha1_generic.c

…

sha3_generic.c

…

sha256_generic.c

…

sha512_generic.c

…

shash.c

…

simd.c

…

skcipher.c

…

sm2.c

…

sm2signature.asn1

…

sm3_generic.c

…

sm4_generic.c

…

streebog_generic.c

…

tcrypt.c

crypto: tcrypt - Fix multibuffer skcipher speed test mem leak

2022-12-31 13:14:24 +01:00

tcrypt.h

…

tea.c

…

testmgr.c

crypto: blake2s - remove shash module

2022-08-17 14:24:19 +02:00

testmgr.h

crypto: testmgr - some more fixes to RSA test vectors

2025-03-13 12:50:48 +01:00

twofish_common.c

…

twofish_generic.c

…

vmac.c

…

wp512.c

…

xcbc.c

…

xor.c

crypto: xor - fix template benchmarking

2024-10-17 15:10:42 +02:00

xts.c

crypto: xts - Only add ecb if it is not already there

2025-06-27 11:05:10 +01:00

xxhash_generic.c

…

zstd.c

…