CVE Database›Document archive›CVE-2025-68763

CVE-2025-68763

kernel: crypto: starfive - Correctly handle return of sg_nents_for_len

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · January 5, 2026

Updated · June 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: starfive - Correctly handle return of sg_nents_for_len

The return value of sg_nents_for_len was assigned to an unsigned long in starfive_hash_digest, causing negative error codes to be converted to large positive integers.

Add error checking for sg_nents_for_len and return immediately on failure to prevent potential buffer overflows.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified