F5-K000161061: High severity F5 Traffix SDC vulnerability
In the Linux kernel, the following vulnerability has been resolved: crypto: algifaead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algifaead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in :Fixed in .Fixed in 5.Fixed in 51812227 - Compensating control
Revert commit 72548b093ee3 so crypto: algif_aead operates out-of-place, while copying the associated data directly.
Event History
Frequently Asked Questions
What level of access does an attacker need?
The vector indicates local access and low privileges are required. No user interaction is required.
What is the potential security impact?
The supplied severity vector rates confidentiality, integrity, and availability impact as high.
Does the provided record identify affected versions or a temporary mitigation?
No affected version information, configuration prerequisites, or workaround is included in the provided data.