crypto: bcm - add error check in the ahash_hmac_init function

Summary

In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - add error check in the ahash_hmac_init function The ahash_init functions may return fails. The ahash_hmac_init should not return ok when ahash_init returns error. For an example, ahash_init will return -ENOMEM when allocation memory is error.

Timeline

1. Dec 28, 2024, 9:46 AM UTCCVE published
2. Oct 15, 2026, 9:41 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: total

3. Oct 15, 2026, 9:51 PM UTCRecord last updated

Affected versions

• Linux Linux

  From 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 · fixed in 8f1a9a960b1107bd0e0ec3736055f5ed0e717edf; From 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 · fixed in 75e1e38e5d80d6d9011b7322698ffba3dd3db30a; From 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 · fixed in 28f8ffa945f7d7150463e15097ea73b19529d6f5; From 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 · fixed in 4ea3e3b761e371102bb1486778e2f8dbc9e37413; From 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 · fixed in 05f0a3f5477ecaa1cf46448504afe9e7c2e96fcc; From 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 · fixed in ae5253313e0ea5f00c06176074592b7f493c8546; From 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 · fixed in ee36db8e8203420e6d5c42eb9428920c2fc36532; From 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 · fixed in bba9e38c5ad41d0a88b22a59e5b6dd3e31825118; From 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 · fixed in 19630cf57233e845b6ac57c9c969a4888925467b

• Linux Linux

  4.11

• KernelLinux

  From 4.11.0 · fixed in 4.19.325; From 4.20.0 · fixed in 5.4.287; From 5.5.0 · fixed in 5.10.231; From 5.11.0 · fixed in 5.15.174; From 5.16.0 · fixed in 6.1.120; From 6.2.0 · fixed in 6.6.64; From 6.7.0 · fixed in 6.11.11; From 6.12.0 · fixed in 6.12.2

References 9