NetSight
IP …
high7.8

CVE-2025-38173

In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher requests Do not access random memory for…

Impact

In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher requests Do not access random memory for zero-length skcipher requests. Just return 0.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.2 before 5.4.295
from 5.5 before 5.10.239
from 5.11 before 5.15.186
from 5.16 before 6.1.142
from 6.2 before 6.6.94
from 6.7 before 6.12.34
DebianDebian Linux
Version 11.0

References