]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
crypto: algif_aead - Fix minimum RX size check for decryption
authorHerbert Xu <herbert@gondor.apana.org.au>
Sun, 12 Apr 2026 05:32:21 +0000 (13:32 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 22 Apr 2026 11:30:43 +0000 (13:30 +0200)
commit3afdc15d6173614d7d834517d9b65e7aa5a08548
tree34109e98fc888ededd56cbd6fa1f5544fa887919
parent9532501e0f1b200ea80baa0e33e0b06da10bb271
crypto: algif_aead - Fix minimum RX size check for decryption

[ Upstream commit 3d14bd48e3a77091cbce637a12c2ae31b4a1687c ]

The check for the minimum receive buffer size did not take the
tag size into account during decryption.  Fix this by adding the
required extra length.

Reported-by: syzbot+aa11561819dc42ebbc7c@syzkaller.appspotmail.com
Reported-by: Daniel Pouzzner <douzzer@mega.nu>
Fixes: d887c52d6ae4 ("crypto: algif_aead - overhaul memory management")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>
crypto/algif_aead.c