In the Linux kernel, the following vulnerability has been resolved:
crypto: starfive - Correctly handle return of sgnentsfor_len
The return value of sgnentsforlen was assigned to an unsigned long in starfivehash_digest, causing negative error codes to be converted to large positive integers.
Add error checking for sgnentsfor_len and return immediately on failure to prevent potential buffer overflows.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68763.json"
}