CVE-2025-38173

crypto: marvell/cesa - Handle zero-length skcipher requests

State: Published
Severity: 7.8 High
Published: Jul 3, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: marvell/cesa - Handle zero-length skcipher requests

Do not access random memory for zero-length skcipher requests. Just return 0.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f63601fd616ab370774fa00ea10bcaaa9e48e84c to before 32d3e8049a8b60f18c5c39f5931bfb1130ac11c9Affected f63601fd616ab370774fa00ea10bcaaa9e48e84c to before c064ae2881d839709bd72d484d5f2af157f46024Affected f63601fd616ab370774fa00ea10bcaaa9e48e84c to before e1cc69da619588b1488689fe3535a0ba75a2b0e7Affected f63601fd616ab370774fa00ea10bcaaa9e48e84c to before 78ea1ff6cb413a03ff6f7af4e28e24b4461a0965Affected f63601fd616ab370774fa00ea10bcaaa9e48e84c to before 5e9666ac8b94c978690f937d59170c5237bd2c45Affected f63601fd616ab370774fa00ea10bcaaa9e48e84c to before 7894694b5d5b2ecfd7fb081d6f60b9e169ab4d13Affected f63601fd616ab370774fa00ea10bcaaa9e48e84c to before c9610dda42bd382a96f97e68825cb5f66cd9e1dcAffected f63601fd616ab370774fa00ea10bcaaa9e48e84c to before 8a4e047c6cc07676f637608a9dd675349b5de0a7Affected
LinuxLinux	4.2Affected before 4.2Not affected 5.4.295 through 5.4.Not affected 5.10.239 through 5.10.Not affected 5.15.186 through 5.15.Not affected 6.1.142 through 6.1.Not affected 6.6.94 through 6.6.Not affected 6.12.34 through 6.12.Not affected 6.15.3 through 6.15.*Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

f63601fd616ab370774fa00ea10bcaaa9e48e84c to before 32d3e8049a8b60f18c5c39f5931bfb1130ac11c9Affected
f63601fd616ab370774fa00ea10bcaaa9e48e84c to before c064ae2881d839709bd72d484d5f2af157f46024Affected
f63601fd616ab370774fa00ea10bcaaa9e48e84c to before e1cc69da619588b1488689fe3535a0ba75a2b0e7Affected
f63601fd616ab370774fa00ea10bcaaa9e48e84c to before 78ea1ff6cb413a03ff6f7af4e28e24b4461a0965Affected
f63601fd616ab370774fa00ea10bcaaa9e48e84c to before 5e9666ac8b94c978690f937d59170c5237bd2c45Affected
f63601fd616ab370774fa00ea10bcaaa9e48e84c to before 7894694b5d5b2ecfd7fb081d6f60b9e169ab4d13Affected
f63601fd616ab370774fa00ea10bcaaa9e48e84c to before c9610dda42bd382a96f97e68825cb5f66cd9e1dcAffected
f63601fd616ab370774fa00ea10bcaaa9e48e84c to before 8a4e047c6cc07676f637608a9dd675349b5de0a7Affected

LinuxLinux

4.2Affected
before 4.2Not affected
5.4.295 through 5.4.*Not affected
5.10.239 through 5.10.*Not affected
5.15.186 through 5.15.*Not affected
6.1.142 through 6.1.*Not affected
6.6.94 through 6.6.*Not affected
6.12.34 through 6.12.*Not affected
6.15.3 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.