From nobody Fri Apr 17 09:18:12 2026 Received: from mail-pl1-f179.google.com (mail-pl1-f179.google.com [209.85.214.179]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 93C23156677 for ; Sat, 21 Feb 2026 15:11:20 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.214.179 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1771686681; cv=none; b=UbcPVYDQigrHJNUzJ9dqzNab3ag6ozrZy09BPNQYt9HmSteVBpWjQv5UPLANL7r8rlZyNBqLEidSFlg7iSeyz9pDbOd5YWuiqlc0nXmZWUkA7tgTEtOJ5HpymC4KoCm1ce7ZyBc9TtMMNgV559CbWgBK4IPXpjBVlYTQccYNpQs= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1771686681; c=relaxed/simple; bh=31YwMowNkuM4idkQhWbY+/kiCcVdVFVM42qTq+Hc+Og=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=Kqx4EwbguOUX9ORo46Dcp6l52qQ3HrQfjrZIqaSgu7JyZP3Ct5wTL90n7KqU6ZGyapAU7q6ORcupULgBLP/A7eM2McDKMmnbNg0xZ6CsLRzI7XyuAnX0jiFw+EhGMY3afIkhLG6DlaOuS2fj0Spg6xFd2hbaCJ+79j6Rr7e/itM= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=Xw+i1+24; arc=none smtp.client-ip=209.85.214.179 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="Xw+i1+24" Received: by mail-pl1-f179.google.com with SMTP id d9443c01a7336-2a7bced39cfso32450015ad.1 for ; Sat, 21 Feb 2026 07:11:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1771686680; x=1772291480; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=nZ1v4uZYYfrFz53g2OEyCTHVBc4Ni9iWSFPy2XJU9Bc=; b=Xw+i1+24a7ShCNdUHTu3QJ6UUyUHuTHUrHuO+kNehuHppUQBNb+uSzQOl7w6Lwtn5p w4B8kzrBuYt7oCq4itdLHvYTdFPlh68tcTNqidcJtBC/bAB5x9umqtv1HILIe+wjAv9o /9YpP+PGMSNDg/qfE00m1FUVCYvqBjzxVcAuLtGtlHdO/lmM6ibgZL0XaUagS+SQzgYv VlX2wB11hgTFVgmhBl+tOHqCJ30BudirxCUNVJS7MMIbOOqRdJk4zAe704WkiCWP6OPi HJPgssQb2qVtlZhirZCPmoEUXTJ/CbgILsheUKTGVra9PCT9WTF8oE58AbcBZzPzznuj qp8w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771686680; x=1772291480; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=nZ1v4uZYYfrFz53g2OEyCTHVBc4Ni9iWSFPy2XJU9Bc=; b=JnlTv7UFUg2ZKYSwG4j4juOk2lSVXaJKUktKz95orCL4zXN9wjJHoOGXvG3vtH0VJt ruMH5hZq/3acooLKQsOJehPbEIXwjoZLAW/RAxOOE6Ali9/mI/CXJz7fchpSVxhd+92x qRAZgLOSk1oLyBnLvhdeGd/jCRS+xRntPNIEubA/KYHEdnIBEjlkjTqydY5tKf4+GLWG s7SVICWZs2qY6aWbmqIH8tdg8+Xw0ajgR15sktdtTdoBKvCDdPE00Y97p/VnFO4BOBy8 yT+UgzCgYN8Ljb9t038xbjt3FAbI1czrwOMkA7tvt9mm2/+0Nj0XMeUyyjDIUa/lYtpq mpuA== X-Forwarded-Encrypted: i=1; AJvYcCVqSdeixxhb6MKp4PvxY5axlPrHxvjXr0w4/DJad0KJsC18AVHG2owx5QrlWycB01vs4nhvIPK1hNZ0mWI=@vger.kernel.org X-Gm-Message-State: AOJu0YyLDY3SRTVOgr40Q7WS/2GB5a+RACovtyRZUNR32hM9jERrgbCu b/9lLSlpCb9pJUl8pq3d62KiMRUUzAhauq9VvkCl+llhnMFX82Z+Jt15J3adPQ== X-Gm-Gg: AZuq6aKY0nsfP5Kir2RYhOgJ1fhm8pBDizzvovV+UoeCr4uKn5rnl1dsXppFuYl7Qxd ahMIf1T+67a2I13gJki2qewn1wAGo41L5BYQ01dVA7CpL2zy3WyFgz8lRxY34kA6v/hdrYwa6fD +/y8N1x08QT4iwPpE4beysdbd2jYNIqGpXXcWSnt2lHUS7ruqQrVfKKm8gfb59tXcQ1SjXQ+xr5 Xp9DQsUEq6B+tGZu6apS9Cn2ikcUhYbJk6xvSMXQ/0SmfBmwxgfPTegacziirU7a4SXyDI82eS8 FBOkK1dO3U1jjZ/oHdmaBtWvtqlvwSI4qZH70HhZy8NLX8AZIQtOwYTKLltaBmKxNSpGxQyCIT0 QMa1eJ9cQF5aliF1DgiRL1mXlLY8A3IvA66rfPVEs953YVK1XPA8i9pCMkBKcHugjMIESae3zso HxOQFtA1KmYUKuweaw9FM= X-Received: by 2002:a17:902:d50b:b0:2aa:fad8:7474 with SMTP id d9443c01a7336-2ad744ec585mr29723225ad.33.1771686679877; Sat, 21 Feb 2026 07:11:19 -0800 (PST) Received: from lmao.. ([2405:201:2c:5868:cba9:7936:c19a:9313]) by smtp.gmail.com with ESMTPSA id d9443c01a7336-2ad7500e346sm34517345ad.49.2026.02.21.07.11.16 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 21 Feb 2026 07:11:19 -0800 (PST) From: Manas To: davem@davemloft.net, herbert@gondor.apana.org.au Cc: linux-crypto@vger.kernel.org, linux-kernel@vger.kernel.org, stable@vger.kernel.org, Manas , Rakshit Awasthi Subject: [PATCH] Crypto : Fix Null deref in scatterwalk_pagedone Date: Sat, 21 Feb 2026 20:40:41 +0530 Message-ID: <20260221151041.65141-1-ghandatmanas@gmail.com> X-Mailer: git-send-email 2.43.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" `sg_next` can return NULL which causes NULL deref in `scatterwalk_start` Reported-by: Manas Ghandat Reported-by: Rakshit Awasthi Signed-off-by: Manas Ghandat Signed-off-by: Rakshit Awasthi --- include/crypto/scatterwalk.h | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/include/crypto/scatterwalk.h b/include/crypto/scatterwalk.h index 32fc4473175b..abbb67391710 100644 --- a/include/crypto/scatterwalk.h +++ b/include/crypto/scatterwalk.h @@ -78,7 +78,8 @@ static inline void scatterwalk_pagedone(struct scatter_wa= lk *walk, int out, page =3D sg_page(walk->sg) + ((walk->offset - 1) >> PAGE_SHIFT); flush_dcache_page(page); } - + if (sg_next(walk->sg) =3D=3D NULL) + return; if (more && walk->offset >=3D walk->sg->offset + walk->sg->length) scatterwalk_start(walk, sg_next(walk->sg)); } --=20 2.43.0