crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.23 % · centile 14 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ The commit referenced in the Fixes tag removed the 'break' from the else branch in qcom_rng_read(), causing an infinite loop whenever 'max' is not a multiple of WORD_SZ. This can be reproduced e.g. by running: kcapi-rng -b 67 >/dev/null There are many ways to fix this without adding back the 'break', but they all seem more awkward than simply adding it back, so do just that. Tested on a machine with Qualcomm Amberwing processor.
Faiblesses (CWE)
- CWE-835 — Boucle dont la condition de sortie est inatteignable (boucle infinie)
Références
- https://git.kernel.org/stable/c/71a89789552b7faf3ef27969b9bc783fa0df3550
- https://git.kernel.org/stable/c/8be06f62b426801dba43ddf8893952a0e62ab6ae
- https://git.kernel.org/stable/c/233a3cc60e7a8fe0be8cf9934ae7b67ba25a866c
- https://git.kernel.org/stable/c/8a06f25f5941c145773204f2f7abef95b4ffb8ce
- https://git.kernel.org/stable/c/05d4d17475d8d094c519bb51658bc47899c175e3
- https://git.kernel.org/stable/c/16287397ec5c08aa58db6acf7dbc55470d78087d
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2022-51325
- GCVE · GCVE-0-2022-48630
Avis du CERT-FR
- CERTFR-2024-AVI-0363 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0329 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.19.236 < 4.19.245cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.4.187 < 5.4.196cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.10.108 < 5.10.118cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.15.31 < 5.15.42cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.17 < 5.17.10cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.18:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.18:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.18:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.18:rc5:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.18:rc6:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.18:rc7:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:5.18:rc9:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected a8e32bbb96c25b7ab29b1894dcd45e0b3b08fd9d < 71a89789552b7faf3ef27969b9bc783fa0df3550 ; affected 184f7bd08ce56f003530fc19f160d54e75bf5c9d < 8be06f62b426801dba43ddf8893952a0e62ab6ae ; affected 0f9b7b8df17525e464294c916acc8194ce38446b < 233a3cc60e7a8fe0be8cf9934ae7b67ba25a866c ; affected ab9337c7cb6f875b6286440b1adfbeeef2b2b2bd < 8a06f25f5941c145773204f2f7abef95b4ffb8ce ; affected a680b1832ced3b5fa7c93484248fd221ea0d614b < 05d4d17475d8d094c519bb51658bc47899c175e3 ; affected a680b1832ced3b5fa7c93484248fd221ea0d614b < 16287397ec5c08aa58db6acf7dbc55470d78087d |
| Linux · Linux | affected 5.17 ; unaffected 0 < 5.17 ; unaffected 4.19.245 ≤ 4.19.* ; unaffected 5.4.196 ≤ 5.4.* ; unaffected 5.10.118 ≤ 5.10.* ; unaffected 5.15.42 ≤ 5.15.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |