averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-08-09 06:14:34 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
fc2d791a43d3880496d1c729b8bd74d2c19cb4e7
linux-stable-mirror/crypto
T
History
Lukas WunnerandHerbert Xu 3b626ba431 X.509: Fix validation of ASN.1 certificate header 
x509_load_certificate_list() seeks to enforce that a certificate starts
with 0x30 0x82 (ASN.1 SEQUENCE tag followed by a length of more than 256
and less than 65535 bytes).

But it only enforces that *either* of those two byte values are present,
instead of checking for the *conjunction* of the two values.  Fix it.

Fixes: 631cc66eb9 ("MODSIGN: Provide module signing public keys to the kernel")
Reported-by: Sashiko <sashiko-bot@kernel.org>
Closes: https://lore.kernel.org/r/20260508033917.B5873C2BCB0@smtp.kernel.org/
Signed-off-by: Lukas Wunner <lukas@wunner.de>
Cc: stable@vger.kernel.org # v3.7+
Reviewed-by: Ignat Korchagin <ignat@linux.win>
Reviewed-by: Alistair Francis <alistair.francis@wdc.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
2026-05-22 20:25:29 +08:00
..
asymmetric_keys
X.509: Fix validation of ASN.1 certificate header
2026-05-22 20:25:29 +08:00
async_tx
async_xor: use xor_gen
2026-04-02 23:36:21 -07:00
krb5
crypto: krb5 - filter out async aead implementations at alloc
2026-05-15 18:08:49 +08:00
842.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
acompress.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
adiantum.c
crypto: adiantum - Drop support for asynchronous xchacha ciphers
2026-01-12 11:07:50 -08:00
aead.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
aegis128-core.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
aegis128-neon-inner.c
…
aegis128-neon.c
crypto: aegis128-neon - Move to more abstract 'ksimd' guard API
2025-11-12 09:52:01 +01:00
aegis-neon.h
…
aegis.h
crypto: aegis - Switch from crypto_ft_tab[] to aes_enc_tab[]
2026-01-12 11:39:58 -08:00
aes.c
crypto: aes - Add cmac, xcbc, and cbcmac algorithms using library
2026-03-09 13:27:20 -07:00
af_alg.c
crypto: af_alg - Cap AEAD AD length to 0x80000000
2026-05-15 18:08:37 +08:00
ahash.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
akcipher.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
algapi.c
Merge tag 'locking-core-2026-02-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2026-02-10 12:28:44 -08:00
algboss.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
algif_aead.c
crypto: af_alg - Remove zero-copy support from skcipher and aead
2026-05-15 18:08:37 +08:00
algif_hash.c
crypto: af_alg - zero initialize memory allocated via sock_kmalloc
2025-10-17 16:03:57 +08:00
algif_rng.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
algif_skcipher.c
crypto: af_alg - limit RX SG extraction by receive buffer budget
2026-04-03 08:54:14 +08:00
anubis.c
crypto: anubis - simplify return statement in anubis_mod_init
2025-09-20 20:21:04 +08:00
api.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
arc4.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
aria_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
authenc.c
crypto: authenc - Correctly pass EINPROGRESS back up to the caller
2025-10-17 16:03:58 +08:00
authencesn.c
crypto: authencesn - Use memcpy_from/to_sglist
2026-05-07 16:10:03 +08:00
blake2b.c
crypto: blake2b - Reimplement using library API
2025-10-29 22:04:24 -07:00
blowfish_common.c
crypto: blowfish - fix typo in comment
2026-01-23 13:48:44 +08:00
blowfish_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
bpf_crypto_skcipher.c
…
camellia_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cast5_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cast6_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cast_common.c
…
cbc.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ccm.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
chacha20poly1305.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
chacha.c
crypto: chacha - register only "-lib" drivers
2025-08-29 09:50:19 -07:00
cipher.c
…
cmac.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
compress.h
…
crc32.c
crypto/crc32[c]: register only "-lib" drivers
2025-06-30 09:31:56 -07:00
crc32c.c
crypto: crc32c - Remove another outdated comment
2026-03-17 09:29:22 -07:00
cryptd.c
crypto: cryptd - Remove unused functions
2026-03-27 18:52:44 +09:00
crypto_engine.c
Merge tag 'locking-core-2026-02-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2026-02-10 12:28:44 -08:00
crypto_null.c
crypto: crypto_null - Drop unused cipher_null crypto_alg
2026-05-07 16:10:01 +08:00
crypto_user.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
ctr.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cts.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
deflate.c
crypto: deflate - fix spurious -ENOSPC
2026-03-26 18:10:58 +09:00
des_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
df_sp80090a.c
crypto: drbg - Eliminate use of 'drbg_string' and lists
2026-05-07 16:10:01 +08:00
dh_helper.c
…
dh.c
crypto: dh - Use crypto_stdrng_get_bytes()
2026-04-03 08:56:11 +08:00
drbg.c
crypto: drbg - Remove support for "prediction resistance"
2026-05-15 18:08:47 +08:00
ecb.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ecc_curve_defs.h
…
ecc.c
crypto: ecc - Fix carry overflow in vli multiplication
2026-05-22 20:25:29 +08:00
ecdh_helper.c
…
ecdh.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ecdsa-p1363.c
crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
2025-04-16 15:16:21 +08:00
ecdsa-x962.c
crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
2025-04-16 15:16:21 +08:00
ecdsa.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ecdsasignature.asn1
…
echainiv.c
crypto: geniv - use memcpy_sglist() instead of null skcipher
2025-05-12 13:32:53 +08:00
ecrdsa_defs.h
…
ecrdsa_params.asn1
…
ecrdsa_pub_key.asn1
…
ecrdsa.c
crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve
2026-05-07 16:10:03 +08:00
essiv.c
crypto: essiv - Check ssize for decryption and in-place encryption
2025-10-09 15:02:35 +08:00
fcrypt.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
fips.c
crypto: fips - annotate fips_enable() with __init to free init memory after boot
2025-12-19 14:47:47 +08:00
gcm.c
crypto: gcm - Use GHASH library instead of crypto_ahash
2026-03-23 16:44:29 -07:00
geniv.c
crypto: geniv - Remove unused spinlock from struct aead_geniv_ctx
2026-04-12 16:47:09 +08:00
hash.h
…
hctr2.c
lib/crypto: gf128hash: Rename polyval module to gf128hash
2026-03-23 13:15:13 -07:00
hmac.c
crypto: hmac - Add ahash support
2025-05-19 13:48:20 +08:00
internal.h
crypto: Enable context analysis
2026-01-05 16:43:36 +01:00
jitterentropy-kcapi.c
Merge tag 'v7.1-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2026-04-15 15:22:26 -07:00
jitterentropy-testing.c
…
jitterentropy.c
crypto: jitterentropy - fix URL
2026-05-15 18:08:36 +08:00
jitterentropy.h
crypto: jitterentropy - Use SHA-3 library
2026-03-09 13:27:21 -07:00
Kconfig
crypto: af_alg - Document the deprecation of AF_ALG
2026-05-07 16:10:03 +08:00
kdf_sp800108.c
crypto: testmgr - replace CRYPTO_MANAGER_DISABLE_TESTS with CRYPTO_SELFTESTS
2025-05-12 13:33:14 +08:00
khazad.c
crypto: khazad - simplify return statement in khazad_mod_init
2025-12-29 08:48:35 +08:00
kpp.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
krb5enc.c
crypto: krb5enc - fix async decrypt skipping hash verification
2026-04-20 16:18:58 +08:00
lrw.c
crypto: Fix several spelling mistakes in comments
2026-03-22 11:17:59 +09:00
lskcipher.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
lz4.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
lz4hc.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
lzo-rle.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
lzo.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
Makefile
crypto: ecc - Unbreak the build on arm with CONFIG_KASAN_STACK=y
2026-05-15 18:08:47 +08:00
md4.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
md5.c
crypto: md5 - Implement export_core() and import_core()
2025-09-08 09:47:38 -07:00
mldsa.c
crypto: Add ML-DSA crypto_sig support
2026-01-21 22:32:50 +00:00
pcbc.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
pcrypt.c
crypto: pcrypt - Fix handling of MAY_BACKLOG requests
2026-04-16 17:29:40 +08:00
proc.c
crypto: Enable context analysis
2026-01-05 16:43:36 +01:00
ripemd.h
…
rmd160.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
rng.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
rsa_helper.c
…
rsa-pkcs1pad.c
…
rsa.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
rsaprivkey.asn1
…
rsapubkey.asn1
…
rsassa-pkcs1.c
crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
2025-04-16 15:16:21 +08:00
scatterwalk.c
Revert "crypto: scatterwalk - Move skcipher walk and use it for memcpy_sglist"
2025-11-22 10:04:50 +08:00
scompress.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
seed.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
seqiv.c
crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
2025-12-19 14:47:06 +08:00
serpent_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
sha1.c
crypto: sha1 - Implement export_core() and import_core()
2025-09-02 19:02:35 -07:00
sha3.c
crypto: sha3 - Reimplement using library API
2025-11-05 20:30:51 -08:00
sha256.c
crypto: sha256 - Implement export_core() and import_core()
2025-09-02 19:02:37 -07:00
sha512.c
crypto: sha512 - Implement export_core() and import_core()
2025-09-02 19:02:39 -07:00
shash.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
sig.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
simd.c
crypto: simd - Remove unused skcipher support
2026-03-22 11:17:59 +09:00
skcipher.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
skcipher.h
…
sm3.c
crypto: sm3 - Replace with wrapper around library
2026-03-23 17:50:59 -07:00
sm4_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
sm4.c
…
streebog_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
tcrypt.c
Merge tag 'v7.1-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2026-04-15 15:22:26 -07:00
tcrypt.h
crypto: tcrypt - Remove unused poly1305 support
2025-11-22 10:04:50 +08:00
tea.c
crypto: Fix several spelling mistakes in comments
2026-03-22 11:17:59 +09:00
testmgr.c
crypto: drbg - Remove support for "prediction resistance"
2026-05-15 18:08:47 +08:00
testmgr.h
crypto: drbg - Remove support for "prediction resistance"
2026-05-15 18:08:47 +08:00
twofish_common.c
…
twofish_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
wp512.c
crypto: wp512 - Use API partial block handling
2025-06-23 16:56:56 +08:00
xcbc.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
xctr.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
xts.c
crypto: Fix several spelling mistakes in comments
2026-03-22 11:17:59 +09:00
xxhash_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
zstd.c
Convert 'alloc_flex' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00