Description

In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and copy it into a buffer first for processing.

INFO

Published Date :

2024-05-17T14:01:57.025Z

Last Modified :

2025-05-04T07:41:12.654Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2023-52669 vulnerability.

Vendors Products
Debian
  • Debian Linux
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2023-52669.

URL Resource
https://git.kernel.org/stable/c/a7f580cdb42ec3d53bbb7c4e4335a98423703285 cve-icon cve-icon
https://git.kernel.org/stable/c/cd51e26a3b89706beec64f2d8296cfb1c34e0c79 cve-icon cve-icon
https://git.kernel.org/stable/c/d07f951903fa9922c375b8ab1ce81b18a0034e3b cve-icon cve-icon
https://git.kernel.org/stable/c/d68ac38895e84446848b7647ab9458d54cacba3e cve-icon cve-icon
https://git.kernel.org/stable/c/dbc9a791a70ea47be9f2acf251700fe254a2ab23 cve-icon cve-icon
https://git.kernel.org/stable/c/e78f1a43e72daf77705ad5b9946de66fc708b874 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024051728-CVE-2023-52669-5a58@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-52669 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-52669 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact