CVE-2023-52669: Debian Linux

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: crypto: s390/aes - Fix buffer overread in CTR mode When processing the last block, the s390 ctr code will always read a whole block, even if there isn't a whole block of data left. Fix this by using the actual length left and copy it into a buffer first for processing.

Affected products

• Debian Debian Linux: version 10.0 only
• Linux Linux Kernel: from 3.0, before 5.10.210 (fixed in 5.10.210); from 5.11, before 5.15.149 (fixed in 5.15.149); from 5.16, before 6.1.76 (fixed in 6.1.76); from 6.2, before 6.6.15 (fixed in 6.6.15); from 6.7, before 6.7.3 (fixed in 6.7.3)

Published 2024-05-17. Last modified 2026-08-04.