Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2025-39802

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
15/09/2025
Última modificación:
15/09/2025

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> lib/crypto: arm/poly1305: Fix register corruption in no-SIMD contexts<br /> <br /> Restore the SIMD usability check that was removed by commit 773426f4771b<br /> ("crypto: arm/poly1305 - Add block-only interface").<br /> <br /> This safety check is cheap and is well worth eliminating a footgun.<br /> While the Poly1305 functions should not be called when SIMD registers<br /> are unusable, if they are anyway, they should just do the right thing<br /> instead of corrupting random tasks&amp;#39; registers and/or computing incorrect<br /> MACs. Fixing this is also needed for poly1305_kunit to pass.<br /> <br /> Just use may_use_simd() instead of the original crypto_simd_usable(),<br /> since poly1305_kunit won&amp;#39;t rely on crypto_simd_disabled_for_test.

Impacto