]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
crypto: algif_aead - Fix minimum RX size check for decryption
authorHerbert Xu <herbert@gondor.apana.org.au>
Thu, 30 Apr 2026 06:36:04 +0000 (23:36 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 30 Apr 2026 09:24:38 +0000 (11:24 +0200)
commitfd427dd84f224309afbcc2cb67c7bb770a01265c
tree6acac359a66ed08b1206ba873ac27f1a55656ba6
parent2b781d1d4f933990318bcc5c68fb75a717379e42
crypto: algif_aead - Fix minimum RX size check for decryption

commit 3d14bd48e3a77091cbce637a12c2ae31b4a1687c upstream.

The check for the minimum receive buffer size did not take the
tag size into account during decryption.  Fix this by adding the
required extra length.

Reported-by: syzbot+aa11561819dc42ebbc7c@syzkaller.appspotmail.com
Reported-by: Daniel Pouzzner <douzzer@mega.nu>
Fixes: d887c52d6ae4 ("crypto: algif_aead - overhaul memory management")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Eric Biggers <ebiggers@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
crypto/algif_aead.c