You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
zero length requests
About this tag
The tag 'zero length requests' on WindowsForum.com covers a Linux kernel security fix (CVE-2025-38173) in the Marvell CESA crypto driver. The fix addresses a vulnerability where zero-length skcipher requests could cause memory dereference errors. The kernel now returns 0 for such requests instead of accessing invalid memory. This topic is relevant for system stability, security, and firmware updates, particularly for devices using Marvell CESA hardware. The discussion includes technical root cause analysis, affected kernel releases, risk assessment, and remediation guidance for administrators managing Linux-based systems.
The Linux kernel CVE-2025-38173 has been assigned to a small but consequential fix in the Marvell CESA crypto driver: the kernel now explicitly handles zero‑length skcipher requests by returning 0 instead of dereferencing memory it shouldn't touch. The change is tiny in code — a defensive check...