Threats Tagged 'cve-2025-68724'

A vulnerability in the Linux kernel's asymmetric_keys crypto subsystem allowed potential integer overflow in asymmetric_key_generate_id. This could lead to a buffer overflow when processing large binary blobs from malicious X.509 certificate fields such as ASN.1 INTEGER serial numbers or issuer names. The issue was resolved by adding checks using check_add_overflow() to prevent overflow and return an error if detected.

Multiple security vulnerabilities affecting the Linux kernel used in Red Hat Enterprise Linux and related distributions have been addressed. These include issues in subsystems such as Integrity Measurement Architecture (IMA), cryptographic APIs, SMB client, network scheduling, netfilter, ALSA USB audio, RDMA, DRM, and others. The vulnerabilities could potentially allow attackers to compromise system integrity or cause memory corruption. A patch is available and updating the kernel to the fixed versions is recommended. Due to an ABI change, recompilation and reinstallation of third-party kernel modules may be necessary after the update.

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id Use check_add_overflow() to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetric_key_id structure and return ERR_PTR(-EOVERFLOW) accordingly. This prevents a possible buffer overflow when copying data from potentially malicious X.509 certificate fields that can be arbitrarily large, such as ASN.1 INTEGER serial numbers, issuer names, etc.