title: crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
description: In the Linux kernel, the following vulnerability has been resolved:
crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
When the mpi_ec_ctx structure is initialized, some fields are not
cleared, causing a crash when referencing the field when the
structure was released. Initially, this issue was ignored because
memory for mpi_ec_ctx is allocated with the __GFP_ZERO flag.
For example, this error will be triggered when calculating the
Za value for SM2 separately.
affected:
{
product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: d58bb7e55a8a, lessThan: 0c3687822259, status: affected, versionType: git
version: d58bb7e55a8a, lessThan: 2bb86817b33c, status: affected, versionType: git
version: d58bb7e55a8a, lessThan: bb44477d4506, status: affected, versionType: git
version: d58bb7e55a8a, lessThan: 7ebf812b7019, status: affected, versionType: git
version: d58bb7e55a8a, lessThan: 7abdfd45a650, status: affected, versionType: git
version: d58bb7e55a8a, lessThan: ba3c55742030, status: affected, versionType: git
}
{
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions:
version: 5.10, status: affected
version: 0, lessThan: 5.10, status: unaffected, versionType: custom
version: 5.10.210, lessThanOrEqual: 5.10.*, status: unaffected, versionType: custom
version: 5.15.149, lessThanOrEqual: 5.15.*, status: unaffected, versionType: custom
version: 6.1.79, lessThanOrEqual: 6.1.*, status: unaffected, versionType: custom
version: 6.6.15, lessThanOrEqual: 6.6.*, status: unaffected, versionType: custom
version: 6.7.3, lessThanOrEqual: 6.7.*, status: unaffected, versionType: custom
version: 6.8, lessThanOrEqual: *, status: unaffected, versionType: original_commit_for_fix
}
