Linux Kernel Marvell CESA Zero-Length Skcipher Request Memory Access Vulnerability

A vulnerability in the Linux kernel's Marvell Cryptographic Engine Secure Acceleration (CESA) module has been addressed. This issue involved improper handling of zero-length symmetric key cipher (skcipher) requests, which led to access of random memory. The vulnerability has been resolved by ensuring that zero-length skcipher requests are properly managed, with the function now returning a value of 0 instead of accessing arbitrary memory.

Impact

Exploitation of this vulnerability could lead to unauthorized access of random memory, potentially causing information leakage or other unintended consequences.