https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 20:52:45 +0000 https://vulnerability.circl.lu/vuln/cve-2026-80522 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>crypto: tegra - fix rctx-&gt;cryptlen calculation in tegra_gcm_do_one_req()</p> <p>Perform rctx-&gt;cryptlen calculation in tegra_gcm_do_one_req() the same way it is done in tegra_ccm_crypt_init(). The current formulae may lead to a crash if a caller does not call tegra_gcm_setauthsize() and so ctx-&gt;authsize remains zero. Then a decrypt operation with incorrect rctx-&gt;cryptlen will lead to a write beyound rctx-&gt;dst_sg buffer.</p> <p>As a follow-up cleanup delete struct tegra_aead_ctx-&gt;authsize field since it appears to be completely unused. Also simplify tegra_ccm_setauthsize() and tegra_gcm_setauthsize() functions respectively.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>crypto: tegra - fix rctx-&gt;cryptlen calculation in tegra_gcm_do_one_req()</p> <p>Perform rctx-&gt;cryptlen calculation in tegra_gcm_do_one_req() the same way it is done in tegra_ccm_crypt_init(). The current formulae may lead to a crash if a caller does not call tegra_gcm_setauthsize() and so ctx-&gt;authsize remains zero. Then a decrypt operation with incorrect rctx-&gt;cryptlen will lead to a write beyound rctx-&gt;dst_sg buffer.</p> <p>As a follow-up cleanup delete struct tegra_aead_ctx-&gt;authsize field since it appears to be completely unused. Also simplify tegra_ccm_setauthsize() and tegra_gcm_setauthsize() functions respectively.</p> https://vulnerability.circl.lu/vuln/cve-2026-80522