Herbert Xu ebd01513a0 crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl ...

commit 31d00156e50ecad37f2cb6cbf04aaa9a260505ef upstream.

When page reassignment was added to af_alg_pull_tsgl the original
loop wasn't updated so it may try to reassign one more page than
necessary.

Add the check to the reassignment so that this does not happen.

Also update the comment which still refers to the obsolete offset
argument.

Reported-by: syzbot+d23888375c2737c17ba5@syzkaller.appspotmail.com
Fixes: e870456d8e ("crypto: algif_skcipher - overhaul memory management")
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Eric Biggers <ebiggers@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>

2026-05-07 12:58:37 +02:00

..

asymmetric_keys

crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id

2026-01-26 16:51:55 +08:00

async_tx

…

842.c

…

ablkcipher.c

…

acompress.c

…

aead.c

crypto: aead,cipher - zeroize key buffer after use

2024-11-08 16:19:08 +01:00

aegis128.c

crypto: aegis - fix handling chunked inputs

2019-03-23 20:09:54 +01:00

aegis128l.c

crypto: aegis - fix handling chunked inputs

2019-03-23 20:09:54 +01:00

aegis256.c

crypto: aegis - fix handling chunked inputs

2019-03-23 20:09:54 +01:00

aegis.h

…

aes_generic.c

…

aes_ti.c

crypto: aes_ti - disable interrupts while accessing S-box

2019-02-12 19:46:58 +01:00

af_alg.c

crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl

2026-05-07 12:58:37 +02:00

ahash.c

crypto: hash - set CRYPTO_TFM_NEED_KEY if ->setkey() fails

2019-03-23 20:09:54 +01:00

akcipher.c

…

algapi.c

Revert "crypto: api - Disallow identical driver names"

2024-05-02 16:17:13 +02:00

algboss.c

crypto: algboss - don't wait during notifier callback

2020-06-25 15:33:09 +02:00

algif_aead.c

crypto: algif_aead - snapshot IV for async AEAD requests

2026-05-07 12:58:33 +02:00

algif_hash.c

crypto: af_alg - zero initialize memory allocated via sock_kmalloc

2026-01-29 12:10:34 +08:00

algif_rng.c

crypto: af_alg - zero initialize memory allocated via sock_kmalloc

2026-01-29 12:10:34 +08:00

algif_skcipher.c

crypto: algif_aead - Revert to operating out-of-place

2026-05-07 12:58:33 +02:00

ansi_cprng.c

…

anubis.c

…

api.c

crypto: api - check for ERR pointers in crypto_destroy_tfm()

2021-05-22 10:59:14 +02:00

arc4.c

…

authenc.c

crypto: authenc - use memcpy_sglist() instead of null skcipher

2026-05-07 12:58:33 +02:00

authencesn.c

crypto: authencesn - Fix src offset when decrypting in-place

2026-05-07 12:58:37 +02:00

blkcipher.c

…

blowfish_common.c

…

blowfish_generic.c

…

camellia_generic.c

…

cast5_generic.c

…

cast6_generic.c

…

cast_common.c

…

cbc.c

…

ccm.c

crypto: ccm - fix incompatibility between "ccm" and "ccm_base"

2019-05-22 07:37:43 +02:00

cfb.c

crypto: cfb - remove bogus memcpy() with src == dest

2019-03-23 20:09:40 +01:00

chacha20_generic.c

crypto: chacha20 - Fix chacha20_block() keystream alignment (again)

2019-11-20 18:47:11 +01:00

chacha20poly1305.c

crypto: chacha20poly1305 - fix atomic sleep when using async algorithm

2019-07-26 09:14:19 +02:00

cipher.c

crypto: aead,cipher - zeroize key buffer after use

2024-11-08 16:19:08 +01:00

cmac.c

…

compress.c

…

crc32_generic.c

…

crc32c_generic.c

…

crct10dif_common.c

…

crct10dif_generic.c

crypto: crct10dif-generic - fix use via crypto_shash_digest()

2019-05-22 07:37:37 +02:00

cryptd.c

crypto: cryptd - Fix skcipher instance memory leak

2019-07-10 09:53:41 +02:00

crypto_engine.c

…

crypto_null.c

…

crypto_user.c

crypto: user - fix memory leak in crypto_report

2019-12-13 08:52:48 +01:00

crypto_wq.c

…

ctr.c

…

cts.c

…

deflate.c

…

des_generic.c

…

dh_helper.c

…

dh.c

…

drbg.c

crypto: drbg - Only fail when jent is unavailable in FIPS mode

2023-05-17 11:13:13 +02:00

ecb.c

…

ecc_curve_defs.h

…

ecc.c

crypto: ecdh - fix big endian bug in ECC library

2019-12-13 08:52:48 +01:00

ecc.h

…

ecdh_helper.c

crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key()

2021-03-04 09:39:41 +01:00

ecdh.c

crypto: ecdh - avoid buffer overflow in ecdh_set_secret()

2021-01-12 20:10:20 +01:00

echainiv.c

…

fcrypt.c

…

fips.c

…

gcm.c

crypto: gcm - fix incompatibility between "gcm" and "gcm_base"

2019-05-22 07:37:37 +02:00

gf128mul.c

…

ghash-generic.c

crypto: ghash - fix unaligned memory access in ghash_setkey()

2019-07-26 09:14:19 +02:00

hash_info.c

…

hmac.c

…

internal.h

crypto: api - Fix race condition in crypto_spawn_alg

2020-02-11 04:34:05 -08:00

jitterentropy-kcapi.c

…

jitterentropy.c

…

Kconfig

crypto: authenc - use memcpy_sglist() instead of null skcipher

2026-05-07 12:58:33 +02:00

keywrap.c

…

khazad.c

…

kpp.c

…

lrw.c

gcc-10: avoid shadowing standard library 'free()' in crypto

2020-05-20 08:18:46 +02:00

lz4.c

…

lz4hc.c

…

lzo.c

…

Makefile

…

mcryptd.c

…

md4.c

…

md5.c

…

memneq.c

…

michael_mic.c

…

morus640.c

crypto: morus - fix handling chunked inputs

2019-03-23 20:09:54 +01:00

morus1280.c

crypto: morus - fix handling chunked inputs

2019-03-23 20:09:54 +01:00

pcbc.c

crypto: pcbc - remove bogus memcpy()s with src == dest

2019-03-23 20:09:55 +01:00

pcrypt.c

crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY

2024-12-05 10:59:30 +01:00

poly1305_generic.c

…

proc.c

…

ripemd.h

…

rmd128.c

…

rmd160.c

…

rmd256.c

…

rmd320.c

…

rng.c

…

rsa_helper.c

…

rsa-pkcs1pad.c

crypto: rsa-pkcs1pad - Use akcipher_request_complete

2023-03-11 16:31:37 +01:00

rsa.c

…

rsaprivkey.asn1

…

rsapubkey.asn1

…

salsa20_generic.c

crypto: salsa20 - don't access already-freed walk.iv

2019-05-22 07:37:36 +02:00

scatterwalk.c

crypto: scatterwalk - Backport memcpy_sglist()

2026-05-07 10:55:28 +02:00

scompress.c

crypto: scompress - initialize per-CPU variables on each CPU

2024-01-25 14:33:39 -08:00

seed.c

…

seqiv.c

crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

2026-01-29 12:10:14 +08:00

serpent_generic.c

crypto: serpent - mark __serpent_setkey_sbox noinline

2019-07-26 09:14:13 +02:00

sha1_generic.c

…

sha3_generic.c

…

sha256_generic.c

…

sha512_generic.c

…

shash.c

crypto: shash - avoid comparing pointers to exported functions under CFI

2021-07-20 16:15:44 +02:00

simd.c

…

skcipher.c

crypto: skcipher - Unmap pages after an external error

2019-10-11 18:20:52 +02:00

sm3_generic.c

…

sm4_generic.c

…

tcrypt.c

crypto: tcrypt - Fix multibuffer skcipher speed test mem leak

2023-01-18 11:30:22 +01:00

tcrypt.h

…

tea.c

…

testmgr.c

crypto: testmgr - fix sizeof() on COMP_BUF_SIZE

2019-12-01 09:16:13 +01:00

testmgr.h

crypto: testmgr - some more fixes to RSA test vectors

2025-04-04 11:11:27 +02:00

tgr192.c

crypto: tgr192 - fix unaligned memory access

2020-01-27 14:50:13 +01:00

twofish_common.c

…

twofish_generic.c

…

vmac.c

…

wp512.c

…

xcbc.c

…

xor.c

…

xts.c

gcc-10: avoid shadowing standard library 'free()' in crypto

2020-05-20 08:18:46 +02:00

zstd.c

…