CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's virtio_crypto_dataq_akcipher_callback function, which improperly handles the length of data returned from a crypto device, potentially leading to out-of-bounds reads from adjacent kernel memory. This could allow an attacker with control over the backend device to exploit the flaw, potentially exposing sensitive data or causing instability. Organizations using Linux systems with virtio crypto devices should prioritize patching this vulnerability to mitigate the risk of exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - bound the akcipher result length virtio_crypto_dataq_akcipher_callback() sets the result length from the device-reported response length without bounding it to the destination buffer, which was allocated for the original request length. sg_copy_from_buffer() then reads that many bytes from the destination buffer; a backend reporting a larger length over-reads adjacent kernel heap into the caller's scatterlist (an out-of-bounds read). Clamp the reported length to the originally requested destination length. A conforming device reports no more than that, so valid results are unaffected.