Linux Kernel Page Reassignment Overflow Vulnerability in af_alg Component

A vulnerability has been identified in the Linux kernel's af_alg component, specifically within the page reassignment process of the af_alg_pull_tsgl function. This issue arises because the original loop handling page reassignment was not properly updated, leading to the potential reassignment of one extra page than necessary. The vulnerability is present in the Linux kernel stable tree.

Impact

The vulnerability could cause a page reassignment overflow, where more pages are reassigned than intended, potentially leading to memory management issues.

Reproduction

The vulnerability can be reproduced by invoking the af_alg_pull_tsgl function with a scatterlist destination that has been prepared to receive pages. The function will incorrectly reassign pages, potentially causing a buffer overflow by exceeding the expected number of pages.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.