CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's mxs_dcp AES block encryption function, where improper handling of the source scatterlist can lead to incorrect byte processing during encryption and decryption. This flaw may result in data corruption or security breaches due to the potential use of stale or zero DMA lengths. Organizations utilizing affected Linux kernel versions, particularly those with configurations enabling scatter-gather DMA, should prioritize applying the fix to mitigate these risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - fix source scatterlist length access mxs_dcp_aes_block_crypt() uses sg_dma_len() without mapping the source scatterlist with dma_map_sg() first. Therefore, sg_dma_len() is invalid and could return zero or a stale DMA length, causing encryption and decryption to process the wrong number of bytes when CONFIG_NEED_SG_DMA_LENGTH=y. Use the original scatterlist length instead.