Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's Poly1305 implementation for ARM architectures can lead to register corruption when SIMD registers are unavailable. This issue arises because the Poly1305 functions may incorrectly assume that SIMD is usable, causing them to disrupt the registers of other tasks and produce erroneous MAC computations. The vulnerability affects several versions of the Linux kernel.
The vulnerability can cause register corruption in tasks, leading to incorrect computations in applications that rely on the Poly1305 cryptographic function.
The vulnerability can be reproduced by calling the Poly1305 functions in a no-SIMD context, where the functions should not be used but can be inadvertently called. This will result in the corruption of the task's registers and incorrect MAC calculations.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been addressed.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.