Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Tegra crypto driver of the Linux kernel was introduced by not properly setting the CRYPTO_ALG_ASYNC flag for asynchronous algorithms. This oversight led the crypto API to incorrectly select these algorithms for users requesting only synchronous ones, causing crashes. The issue has been addressed by adding the missing flag, aligning the driver with the correct behavior of others. Additionally, unnecessary CRYPTO_ALG_TYPE_* flags were removed, as they were ignored and overwritten by the registration function.
The absence of the CRYPTO_ALG_ASYNC flag on asynchronous algorithms in the Tegra crypto driver caused crashes by misaligning algorithm availability with user requests.
Users can apply the latest patch available in the Linux kernel stable tree to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.