Threats tagged 'ghsa-5h39-f843-4g5v'

A high-severity vulnerability in the Linux kernel's s390/zcrypt subsystem was resolved. The issue involved improper input validation in the xcrb_msg_to_type6_ep11cprb_msgx() function, leading to potential buffer overflows due to missing minimum size checks and arithmetic overflow in length calculations. The vulnerability was addressed by improving length and overflow checks, using safer data types, and adding basic ASN.1 parsing for payload validation.