Zero-Length Skcipher Request Vulnerability in Linux Kernel by Marvell

CVE-2025-38173

What is CVE-2025-38173?

A vulnerability in the Linux kernel affects Marvell's cryptographic engine, specifically regarding the handling of zero-length symmetric key cipher (skcipher) requests. This issue leads to the unpredictable behavior of accessing random memory, which can be exploited. The proper fix ensures that such requests simply return 0 instead of compromising system stability, safeguarding against potential data leaks or system crashes.

References