Riskcovery

CVE-2024-38579

crypto: bcm - Fix pointer arithmetic

State
Published
Severity
Not scored
Published
Jun 19, 2024
Updated
Oct 15, 2026
Reserved
Jun 18, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: bcm - Fix pointer arithmetic

In spu2_dump_omd() value of ptr is increased by ciph_key_len instead of hash_iv_len which could lead to going beyond the buffer boundaries. Fix this bug by changing ciph_key_len to hash_iv_len.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before c256b616067bfd6d274c679c06986b78d2402434Affected
  • 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before e719c8991c161977a67197775067ab456b518c7bAffected
  • 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before ebed0d666fa709bae9e8cafa8ec6e7ebd1d318c6Affected
  • 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before c69a1e4b419c2c466dd8c5602bdebadc353973ddAffected
  • 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 49833a8da6407e7e9b532cc4054fdbcaf78f5fddAffected
  • 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before d0f14ae223c2421b334c1f1a9e48f1e809aee3a0Affected
  • 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before c0082ee420639a97e40cae66778b02b341b005e5Affected
  • 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 3b7a40740f04e2f27114dfd6225c5e721dda9d57Affected
  • 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 2b3460cbf454c6b03d7429e9ffc4fe09322eb1a9Affected
LinuxLinux
  • 4.11Affected
  • before 4.11Not affected
  • 4.19.316 through 4.19.*Not affected
  • 5.4.278 through 5.4.*Not affected
  • 5.10.219 through 5.10.*Not affected
  • 5.15.161 through 5.15.*Not affected
  • 6.1.93 through 6.1.*Not affected
  • 6.6.33 through 6.6.*Not affected
  • 6.8.12 through 6.8.*Not affected
  • 6.9.3 through 6.9.*Not affected
  • 6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.