Executive Summary

This vulnerability is in the Linux kernel's crypto subsystem, specifically in the algif_aead module responsible for authenticated encryption with associated data (AEAD). The issue was that during decryption, the check for the minimum receive buffer size did not account for the tag size, which is an essential part of the encrypted data used for authentication. This could lead to improper handling of the buffer size. The vulnerability was fixed by adding the required extra length to the minimum receive buffer size check.

Useful 0 Not Useful 0

Impact Analysis

Because the minimum receive buffer size check during decryption did not consider the tag size, it could potentially lead to incorrect processing of encrypted data. This might cause decryption failures or security issues related to data integrity verification. However, specific impacts such as data leakage or system compromise are not detailed in the provided information.

Useful 0 Not Useful 0