In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and copy it into a buffer first for processing.
| Product | Vendor | Version |
|---|---|---|
| Linux | Linux | firmware 2.00 to 2.07 |
| Linux | Linux | firmware 1.00 to 1.48 |
| Linux | Linux | Ver1.0.13 and earlier |
| Linux | Linux | n/a |