CVE-2025-38173

In the Linux kernel, the following vulnerability has been resolved:

crypto: marvell/cesa - Handle zero-length skcipher requests

Do not access random memory for zero-length skcipher requests. Just return 0.

This vulnerability poses negligible risk to Red Hat environments as the Marvell CESA hardware cryptographic engine driver is not enabled in supported Red Hat Enterprise Linux kernels. Exploitation requires specialized Marvell system-on-chip hardware and an active driver instance processing symmetric cipher operations. Because the vulnerable driver code is not built into standard Red Hat kernel packages, supported deployments remain unaffected.