Threats tagged 'ghsa-8cmf-4x36-qp8x'

A vulnerability in the Linux kernel's s390/zcrypt component was resolved, involving improper input validation in the xcrb_msg_to_type6cprb_msgx() function. The flaw includes integer overflows during 4-byte alignment, missing minimum size validation for user-supplied buffers, and arithmetic overflow in size sum calculations. These issues could lead to buffer overflows and uninitialized memory access. The vulnerability has a high severity score of 7.8 CVSS v3.1 and affects local attackers with low privileges. A fix has been implemented to use safer length calculations and boundary checks.