CVE-2025-68763: crypto: starfive - Correctly handle return of sg_nents_for_len
crypto: starfive - Correctly handle return of sgnentsforlen
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In starfive_hash_digest, check the return value of sg_nents_for_len using a signed type and return immediately when it reports a negative error code, preventing conversion to a large unsigned value and potential buffer overflow.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68763?
CVE-2025-68763 is rated as a moderate severity vulnerability due to potential impacts on error handling in the Linux kernel.
How do I fix CVE-2025-68763?
To fix CVE-2025-68763, ensure you update your Linux kernel to the latest version where this vulnerability has been patched.
What components are affected by CVE-2025-68763?
CVE-2025-68763 affects the Linux kernel, specifically the starfive_hash_digest function related to crypto operations.
What is the impact of CVE-2025-68763?
The impact of CVE-2025-68763 involves potential incorrect error handling that could lead to unexpected behavior in crypto operations.
Who is the vendor for CVE-2025-68763?
The vendor for CVE-2025-68763 is Linux, as it pertains to a vulnerability within the Linux kernel.