{"id":2231525,"url":"http://patchwork.ozlabs.org/api/patches/2231525/?format=json","web_url":"http://patchwork.ozlabs.org/project/ubuntu-kernel/patch/54cf9d4efa33ef7965f464e86bbdc12aeee85de0.1777576834.git.massimiliano.pellizzer@canonical.com/","project":{"id":15,"url":"http://patchwork.ozlabs.org/api/projects/15/?format=json","name":"Ubuntu Kernel","link_name":"ubuntu-kernel","list_id":"kernel-team.lists.ubuntu.com","list_email":"kernel-team@lists.ubuntu.com","web_url":null,"scm_url":null,"webscm_url":null,"list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<54cf9d4efa33ef7965f464e86bbdc12aeee85de0.1777576834.git.massimiliano.pellizzer@canonical.com>","list_archive_url":null,"date":"2026-04-30T19:28:18","name":"[SRU,N,v2,7/9] crypto: authencesn - Fix src offset when decrypting in-place","commit_ref":null,"pull_url":null,"state":"new","archived":false,"hash":"99d69b2d7e06e72e8af14e3044a71aa7fd9834e0","submitter":{"id":89057,"url":"http://patchwork.ozlabs.org/api/people/89057/?format=json","name":"Massimiliano Pellizzer","email":"massimiliano.pellizzer@canonical.com"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/ubuntu-kernel/patch/54cf9d4efa33ef7965f464e86bbdc12aeee85de0.1777576834.git.massimiliano.pellizzer@canonical.com/mbox/","series":[{"id":502367,"url":"http://patchwork.ozlabs.org/api/series/502367/?format=json","web_url":"http://patchwork.ozlabs.org/project/ubuntu-kernel/list/?series=502367","date":"2026-04-30T19:28:11","name":"CVE-2026-31431","version":2,"mbox":"http://patchwork.ozlabs.org/series/502367/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2231525/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2231525/checks/","tags":{},"related":[],"headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (4096-bit key;\n unprotected) header.d=canonical.com header.i=@canonical.com\n header.a=rsa-sha256 header.s=20251003 header.b=qzBJG5Em;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.ubuntu.com\n (client-ip=185.125.189.65; helo=lists.ubuntu.com;\n envelope-from=kernel-team-bounces@lists.ubuntu.com;\n receiver=patchwork.ozlabs.org)"],"Received":["from lists.ubuntu.com (lists.ubuntu.com [185.125.189.65])\n\t(using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g644L6rnrz1yJr\n\tfor ; Fri, 01 May 2026 05:29:38 +1000 (AEST)","from localhost ([127.0.0.1] helo=lists.ubuntu.com)\n\tby lists.ubuntu.com with esmtp (Exim 4.86_2)\n\t(envelope-from )\n\tid 1wIX4l-0002SY-Mb; Thu, 30 Apr 2026 19:29:31 +0000","from smtp-relay-internal-0.internal ([10.131.114.225]\n helo=smtp-relay-internal-0.canonical.com)\n by lists.ubuntu.com with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)\n (Exim 4.86_2) (envelope-from )\n id 1wIX4h-00026X-C3\n for kernel-team@lists.ubuntu.com; Thu, 30 Apr 2026 19:29:27 +0000","from mail-wr1-f69.google.com (mail-wr1-f69.google.com\n [209.85.221.69])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest\n SHA256)\n (No client certificate requested)\n by smtp-relay-internal-0.canonical.com (Postfix) with ESMTPS id 1FEA33FE9F\n for ; Thu, 30 Apr 2026 19:29:27 +0000 (UTC)","by mail-wr1-f69.google.com with SMTP id\n ffacd0b85a97d-449c8f24067so487487f8f.1\n for ; Thu, 30 Apr 2026 12:29:27 -0700 (PDT)","from tuxedo-infinitybook (net-93-71-66-38.cust.vodafonedsl.it.\n [93.71.66.38]) by smtp.gmail.com with ESMTPSA id\n ffacd0b85a97d-448e74324a5sm8133217f8f.12.2026.04.30.12.29.25\n for \n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Thu, 30 Apr 2026 12:29:25 -0700 (PDT)"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=canonical.com;\n s=20251003; t=1777577367;\n bh=eNWfpSpXVeoMAtGFlXpXuHDsQpgtmIMQik/aQyA2ssA=;\n h=From:To:Subject:Date:Message-ID:In-Reply-To:References:\n MIME-Version;\n b=qzBJG5EmmjzFwG35PktInVdgxldtwbS083PodFLu1m+2IpuDoE/XMKFdlJCld8TSC\n fHwjvuSRnGIDk2iwiojcvDvM0B0Dkyez0X1WflbDB2be+SXYdXfaXcvQUZKg+bCZ7n\n 5cb9QUmSIWr/k6f71yXNQRyBGs+GtzKmR+qVO6xvEfOpOJgJuaeOuSIL6zOapV3zFC\n uUG0OxqDzuHTXbgoD/BqRkISnwqOvOL0saBYjys3mItZmdSYkgwYfckh5IuYCQuDi7\n xExUQwezASSHN/WsvAMRHe3kvef1m4h63hn1EDMuwC/V9Ybc82Tg8afqsjb3i/GsuN\n eR/rMtKlR52lBl57VGhEc+LZQ0j83FLTdvr/BhE5h2KVmIWbowyRaawXpK4vtNfk73\n hMP2MCjwH76ob2g11C4BgJ5oKJtBvqd5Bj6m4wF4BXvsDeF+GtrR19Pddo12FdgArc\n 1ZpJckY0rsK9UAmlKMWMZATuoLgNhB8qaBc4dKyLw7BF2rMtPoFhq5v04lKcwRrZLH\n ILmi/CIJJayeRkPLkS7Vx6VIiXMfUIUIvOw6W77Jv6EIT4/t5+u9fpX6l7jQjj7GWj\n tVacqhWk0CMK1BzRwrMrjDmbcADVNvlX3CMHq8aTV9G2VPMlbSLzJJaoZfGX8FWGYu\n n+m34Ur//TaXp3Uf32RNqRn0=","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1777577366; x=1778182166;\n h=content-transfer-encoding:mime-version:references:in-reply-to\n :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to\n :cc:subject:date:message-id:reply-to;\n bh=eNWfpSpXVeoMAtGFlXpXuHDsQpgtmIMQik/aQyA2ssA=;\n b=IngxhBHzXNUlENvhmFx0FzFNIlLA0IjcozRmQDZXqObKkwa/zxChGx21F7H5H91MkE\n Zp/B7xEKuoCir3ddO7mNYH6nvWeyikHKSQkEa4/RdNOg7I4SVI2U8SlxwA9ZzuuB8IoY\n x96my3f6zxya9rzXfRcGQxUQS9o2aRP5qDJcWfu98RcneS8r3UEQT7TH981nxQ3REH0Y\n 6SgpqCaG6iqatHPSP2MnRKmBTfXL0LKCF7t0pNcpXczMVLdn321N0qt15vdMTLNVaP7r\n l/VmNnbzTa/FcSB97TgrBYNVcJqQF7tkAHaY0VS1CAe95rYCTK8MSJkJpyaLM2jOgQEj\n I7BA==","X-Gm-Message-State":"AOJu0YzCzey+2o1ZUthynqvstzAcFyZavVhScqHipU4P0K7NJNZN2aKq\n WzDRR5g+WrhpDx+/ZayDOSqXanM16UqB5T0uu2nR6NU0uS69cciBN9nDi3kIHw7ntV3mYhsSnDz\n laAcBsB7wdXeDhn0hYdnQozDA+c1GudAQ8nCfz5wFoY7NYniNarA7GaDaQcRD/iNjjE86ykzxOL\n cvpdBWfrq6YW+bJg==","X-Gm-Gg":"AeBDiev/8cWDC9IKMbCrNvSv/OKJc5g4f3al4EKbBmt211d23awaLBeUONrzdrdTZ8U\n 6g2bpttLUUYqJJnm18oXspZPuBMDe0dZNh/Ksl6xFE1iP+5YILN3K/mNY0p52MKT+JSqoorWUWN\n Yp3SGOGERL6QDqy7wV/mUQ5JMH7kNyaOcF9473/yDCaqWc5fPEGX4+/sjmzKW1cltiXigdfrOLe\n fB+lus0JVUapOtYHjLgv89/kBEfqZjeaLN+FjpTLI4PIN8DIhfW0htvbHfUzU3WE5nQMdeAW/3/\n CUZSFsqlcZulXXKXa5cdAK3hMWO6zNbu7am/qDSnUg2ALR7wpGP4H7B0n6+MdfTAdHwa9mHLCoB\n S9nhhKMpy/8IA0prnQo99njvfw74ekzWl5vTx9jOZHCWqGIhavlTSkhWMGqpID7ds61p9emnveX\n nwgdaPE6oiGOdE5S62svPVrrD1s6S1EKLG3ViTu03jUHvAkeHmDHDJdWEAr2zSrTYwIV6cLN9Z2\n a1hZtw5kJDMOw==","X-Received":["by 2002:a05:6000:136c:b0:449:9aee:4581 with SMTP id\n ffacd0b85a97d-4499aee4685mr3850586f8f.12.1777577366448;\n Thu, 30 Apr 2026 12:29:26 -0700 (PDT)","by 2002:a05:6000:136c:b0:449:9aee:4581 with SMTP id\n ffacd0b85a97d-4499aee4685mr3850561f8f.12.1777577365978;\n Thu, 30 Apr 2026 12:29:25 -0700 (PDT)"],"From":"Massimiliano Pellizzer ","To":"kernel-team@lists.ubuntu.com","Subject":"[SRU][N][PATCH v2 7/9] crypto: authencesn - Fix src offset when\n decrypting in-place","Date":"Thu, 30 Apr 2026 21:28:18 +0200","Message-ID":"\n <54cf9d4efa33ef7965f464e86bbdc12aeee85de0.1777576834.git.massimiliano.pellizzer@canonical.com>","X-Mailer":"git-send-email 2.53.0","In-Reply-To":"","References":"\n <177757626672.818044.11792928639290212185@tuxedo-infinitybook.public>\n ","MIME-Version":"1.0","X-BeenThere":"kernel-team@lists.ubuntu.com","X-Mailman-Version":"2.1.20","Precedence":"list","List-Id":"Kernel team discussions ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Content-Type":"text/plain; charset=\"utf-8\"","Content-Transfer-Encoding":"base64","Errors-To":"kernel-team-bounces@lists.ubuntu.com","Sender":"\"kernel-team\" "},"content":"From: Herbert Xu \n\ncommit 1f48ad3b19a9dfc947868edda0bb8e48e5b5a8fa upstream.\n\nThe src SG list offset wasn't set properly when decrypting in-place,\nfix it.\n\nReported-by: Wolfgang Walter \nFixes: e02494114ebf (\"crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption\")\nSigned-off-by: Herbert Xu \nSigned-off-by: Eric Biggers \nSigned-off-by: Greg Kroah-Hartman \n(cherry picked from commit 129f129344010572dc7407ade1dd89925519eb33 linux-6.12.y)\nCVE-2026-31431\nSigned-off-by: Massimiliano Pellizzer \n---\n crypto/authencesn.c | 6 ++++--\n 1 file changed, 4 insertions(+), 2 deletions(-)","diff":"diff --git a/crypto/authencesn.c b/crypto/authencesn.c\nindex 257af38ac4de..c01cc3087919 100644\n--- a/crypto/authencesn.c\n+++ b/crypto/authencesn.c\n@@ -228,9 +228,11 @@ static int crypto_authenc_esn_decrypt_tail(struct aead_request *req,\n \n decrypt:\n \n-\tif (src != dst)\n-\t\tsrc = scatterwalk_ffwd(areq_ctx->src, src, assoclen);\n \tdst = scatterwalk_ffwd(areq_ctx->dst, dst, assoclen);\n+\tif (req->src == req->dst)\n+\t\tsrc = dst;\n+\telse\n+\t\tsrc = scatterwalk_ffwd(areq_ctx->src, src, assoclen);\n \n \tskcipher_request_set_tfm(skreq, ctx->enc);\n \tskcipher_request_set_callback(skreq, flags,\n","prefixes":["SRU","N","v2","7/9"]}