In the Linux kernel, the following vulnerability has been resolved:
crypto: s390/aes - Fix buffer overread in CTR mode
When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and copy it into a buffer first for processing.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52669.json"
}[
{
"signature_type": "Function",
"digest": {
"length": 1130.0,
"function_hash": "191140735434770990874612980040347082880"
},
"signature_version": "v1",
"target": {
"function": "ctr_aes_crypt",
"file": "arch/s390/crypto/aes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e78f1a43e72daf77705ad5b9946de66fc708b874",
"id": "CVE-2023-52669-038b1427",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"172838049620477757211572524088389850008",
"118224058231133557822221336401585062683",
"261084454889506928923883594676982489079",
"78729920401788517765558854555757396816",
"51808667769168145313155187477900846472",
"235687018120139069319849906200144040358",
"77163223994454754913559302389908166476"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "arch/s390/crypto/paes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd51e26a3b89706beec64f2d8296cfb1c34e0c79",
"id": "CVE-2023-52669-14ad6db5",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"67397497218840274973959646556210063786",
"85239063041776293731310225512141669576",
"7625873301655859755819727812471816621",
"304514243393103148450643181820787880111"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "arch/s390/crypto/aes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d07f951903fa9922c375b8ab1ce81b18a0034e3b",
"id": "CVE-2023-52669-257a7501",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1767.0,
"function_hash": "222240027325836978537212092515699450388"
},
"signature_version": "v1",
"target": {
"function": "ctr_paes_crypt",
"file": "arch/s390/crypto/paes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a7f580cdb42ec3d53bbb7c4e4335a98423703285",
"id": "CVE-2023-52669-38087d16",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1767.0,
"function_hash": "222240027325836978537212092515699450388"
},
"signature_version": "v1",
"target": {
"function": "ctr_paes_crypt",
"file": "arch/s390/crypto/paes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d68ac38895e84446848b7647ab9458d54cacba3e",
"id": "CVE-2023-52669-395610c4",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"172838049620477757211572524088389850008",
"118224058231133557822221336401585062683",
"261084454889506928923883594676982489079",
"78729920401788517765558854555757396816",
"51808667769168145313155187477900846472",
"235687018120139069319849906200144040358",
"77163223994454754913559302389908166476"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "arch/s390/crypto/paes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e78f1a43e72daf77705ad5b9946de66fc708b874",
"id": "CVE-2023-52669-3ab3767b",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1130.0,
"function_hash": "191140735434770990874612980040347082880"
},
"signature_version": "v1",
"target": {
"function": "ctr_aes_crypt",
"file": "arch/s390/crypto/aes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a7f580cdb42ec3d53bbb7c4e4335a98423703285",
"id": "CVE-2023-52669-4adb2d33",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"172838049620477757211572524088389850008",
"118224058231133557822221336401585062683",
"261084454889506928923883594676982489079",
"78729920401788517765558854555757396816",
"51808667769168145313155187477900846472",
"235687018120139069319849906200144040358",
"77163223994454754913559302389908166476"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "arch/s390/crypto/paes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dbc9a791a70ea47be9f2acf251700fe254a2ab23",
"id": "CVE-2023-52669-4c476131",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"67397497218840274973959646556210063786",
"85239063041776293731310225512141669576",
"7625873301655859755819727812471816621",
"304514243393103148450643181820787880111"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "arch/s390/crypto/aes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e78f1a43e72daf77705ad5b9946de66fc708b874",
"id": "CVE-2023-52669-59ddc985",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"172838049620477757211572524088389850008",
"118224058231133557822221336401585062683",
"261084454889506928923883594676982489079",
"78729920401788517765558854555757396816",
"51808667769168145313155187477900846472",
"235687018120139069319849906200144040358",
"77163223994454754913559302389908166476"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "arch/s390/crypto/paes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a7f580cdb42ec3d53bbb7c4e4335a98423703285",
"id": "CVE-2023-52669-5abf5050",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"67397497218840274973959646556210063786",
"85239063041776293731310225512141669576",
"7625873301655859755819727812471816621",
"304514243393103148450643181820787880111"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "arch/s390/crypto/aes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d68ac38895e84446848b7647ab9458d54cacba3e",
"id": "CVE-2023-52669-758b6737",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1130.0,
"function_hash": "191140735434770990874612980040347082880"
},
"signature_version": "v1",
"target": {
"function": "ctr_aes_crypt",
"file": "arch/s390/crypto/aes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd51e26a3b89706beec64f2d8296cfb1c34e0c79",
"id": "CVE-2023-52669-8509cbc3",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"172838049620477757211572524088389850008",
"118224058231133557822221336401585062683",
"261084454889506928923883594676982489079",
"78729920401788517765558854555757396816",
"51808667769168145313155187477900846472",
"235687018120139069319849906200144040358",
"77163223994454754913559302389908166476"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "arch/s390/crypto/paes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d68ac38895e84446848b7647ab9458d54cacba3e",
"id": "CVE-2023-52669-941db298",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"67397497218840274973959646556210063786",
"85239063041776293731310225512141669576",
"7625873301655859755819727812471816621",
"304514243393103148450643181820787880111"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "arch/s390/crypto/aes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd51e26a3b89706beec64f2d8296cfb1c34e0c79",
"id": "CVE-2023-52669-95795cc2",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1767.0,
"function_hash": "222240027325836978537212092515699450388"
},
"signature_version": "v1",
"target": {
"function": "ctr_paes_crypt",
"file": "arch/s390/crypto/paes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cd51e26a3b89706beec64f2d8296cfb1c34e0c79",
"id": "CVE-2023-52669-9dbc3aa8",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1767.0,
"function_hash": "222240027325836978537212092515699450388"
},
"signature_version": "v1",
"target": {
"function": "ctr_paes_crypt",
"file": "arch/s390/crypto/paes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dbc9a791a70ea47be9f2acf251700fe254a2ab23",
"id": "CVE-2023-52669-a24f4b2e",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"172838049620477757211572524088389850008",
"118224058231133557822221336401585062683",
"261084454889506928923883594676982489079",
"78729920401788517765558854555757396816",
"51808667769168145313155187477900846472",
"235687018120139069319849906200144040358",
"77163223994454754913559302389908166476"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "arch/s390/crypto/paes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d07f951903fa9922c375b8ab1ce81b18a0034e3b",
"id": "CVE-2023-52669-b1e13146",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1130.0,
"function_hash": "191140735434770990874612980040347082880"
},
"signature_version": "v1",
"target": {
"function": "ctr_aes_crypt",
"file": "arch/s390/crypto/aes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d68ac38895e84446848b7647ab9458d54cacba3e",
"id": "CVE-2023-52669-c6b19c69",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1130.0,
"function_hash": "191140735434770990874612980040347082880"
},
"signature_version": "v1",
"target": {
"function": "ctr_aes_crypt",
"file": "arch/s390/crypto/aes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dbc9a791a70ea47be9f2acf251700fe254a2ab23",
"id": "CVE-2023-52669-e3affdf1",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"67397497218840274973959646556210063786",
"85239063041776293731310225512141669576",
"7625873301655859755819727812471816621",
"304514243393103148450643181820787880111"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "arch/s390/crypto/aes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dbc9a791a70ea47be9f2acf251700fe254a2ab23",
"id": "CVE-2023-52669-e7409f60",
"deprecated": false
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"67397497218840274973959646556210063786",
"85239063041776293731310225512141669576",
"7625873301655859755819727812471816621",
"304514243393103148450643181820787880111"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "arch/s390/crypto/aes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a7f580cdb42ec3d53bbb7c4e4335a98423703285",
"id": "CVE-2023-52669-f10be50e",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1767.0,
"function_hash": "222240027325836978537212092515699450388"
},
"signature_version": "v1",
"target": {
"function": "ctr_paes_crypt",
"file": "arch/s390/crypto/paes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e78f1a43e72daf77705ad5b9946de66fc708b874",
"id": "CVE-2023-52669-f5e0b3f1",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1130.0,
"function_hash": "191140735434770990874612980040347082880"
},
"signature_version": "v1",
"target": {
"function": "ctr_aes_crypt",
"file": "arch/s390/crypto/aes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d07f951903fa9922c375b8ab1ce81b18a0034e3b",
"id": "CVE-2023-52669-f6045052",
"deprecated": false
},
{
"signature_type": "Function",
"digest": {
"length": 1767.0,
"function_hash": "222240027325836978537212092515699450388"
},
"signature_version": "v1",
"target": {
"function": "ctr_paes_crypt",
"file": "arch/s390/crypto/paes_s390.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d07f951903fa9922c375b8ab1ce81b18a0034e3b",
"id": "CVE-2023-52669-f6c35b9f",
"deprecated": false
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52669.json"