In the Linux kernel, the following vulnerability has been resolved:
crypto: bcm - Fix pointer arithmetic
In spu2dumpomd() value of ptr is increased by ciphkeylen instead of hashivlen which could lead to going beyond the buffer boundaries. Fix this bug by changing ciphkeylen to hashivlen.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"15832989721993021991491729990905397139",
"333445667516619531231508524049021027233",
"176135163695676351448615101583218790683",
"315978016825329054495283924967757416424"
]
},
"target": {
"file": "drivers/crypto/bcm/spu2.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2b3460cbf454c6b03d7429e9ffc4fe09322eb1a9",
"id": "CVE-2024-38579-03502aeb",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"15832989721993021991491729990905397139",
"333445667516619531231508524049021027233",
"176135163695676351448615101583218790683",
"315978016825329054495283924967757416424"
]
},
"target": {
"file": "drivers/crypto/bcm/spu2.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ebed0d666fa709bae9e8cafa8ec6e7ebd1d318c6",
"id": "CVE-2024-38579-2b9dfec2",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"15832989721993021991491729990905397139",
"333445667516619531231508524049021027233",
"176135163695676351448615101583218790683",
"315978016825329054495283924967757416424"
]
},
"target": {
"file": "drivers/crypto/bcm/spu2.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3b7a40740f04e2f27114dfd6225c5e721dda9d57",
"id": "CVE-2024-38579-351894b8",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"15832989721993021991491729990905397139",
"333445667516619531231508524049021027233",
"176135163695676351448615101583218790683",
"315978016825329054495283924967757416424"
]
},
"target": {
"file": "drivers/crypto/bcm/spu2.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49833a8da6407e7e9b532cc4054fdbcaf78f5fdd",
"id": "CVE-2024-38579-76ce5153",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"15832989721993021991491729990905397139",
"333445667516619531231508524049021027233",
"176135163695676351448615101583218790683",
"315978016825329054495283924967757416424"
]
},
"target": {
"file": "drivers/crypto/bcm/spu2.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d0f14ae223c2421b334c1f1a9e48f1e809aee3a0",
"id": "CVE-2024-38579-8680e113",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"15832989721993021991491729990905397139",
"333445667516619531231508524049021027233",
"176135163695676351448615101583218790683",
"315978016825329054495283924967757416424"
]
},
"target": {
"file": "drivers/crypto/bcm/spu2.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c69a1e4b419c2c466dd8c5602bdebadc353973dd",
"id": "CVE-2024-38579-8b5527bf",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"15832989721993021991491729990905397139",
"333445667516619531231508524049021027233",
"176135163695676351448615101583218790683",
"315978016825329054495283924967757416424"
]
},
"target": {
"file": "drivers/crypto/bcm/spu2.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c0082ee420639a97e40cae66778b02b341b005e5",
"id": "CVE-2024-38579-a4543a57",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"15832989721993021991491729990905397139",
"333445667516619531231508524049021027233",
"176135163695676351448615101583218790683",
"315978016825329054495283924967757416424"
]
},
"target": {
"file": "drivers/crypto/bcm/spu2.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e719c8991c161977a67197775067ab456b518c7b",
"id": "CVE-2024-38579-a8947837",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"15832989721993021991491729990905397139",
"333445667516619531231508524049021027233",
"176135163695676351448615101583218790683",
"315978016825329054495283924967757416424"
]
},
"target": {
"file": "drivers/crypto/bcm/spu2.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c256b616067bfd6d274c679c06986b78d2402434",
"id": "CVE-2024-38579-eded161c",
"deprecated": false,
"signature_version": "v1"
}
]