From patchwork Tue Sep 29 13:12:49 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Jakub Szczudlo (Nokia)" X-Patchwork-Id: 99587 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 00BCDCA5FAC for ; Tue, 29 Sep 2026 13:12:57 +0000 (UTC) Received: from MRWPR03CU001.outbound.protection.outlook.com (MRWPR03CU001.outbound.protection.outlook.com [40.107.130.40]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.7508.1790687573174310106 for ; Tue, 29 Sep 2026 06:12:53 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@nokia.com header.s=selector1 header.b=f+hdU/BY; spf=permerror, err=parse error for token &{10 18 %{i}._ip.%{h}._ehlo.%{d}._spf.vali.email}: invalid domain name (domain: nokia.com, ip: 40.107.130.40, mailfrom: jakub.szczudlo@nokia.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=sK3SitQytl39akO3RhPECjkk6MdXzgnYt1lhm8CnD7C2iZykeDkEikZKPHb8bolplh7tlhQwd/vqNgwBLX5i0nPHbQQ7s7aJz9GX6qajNYpZcEYj1hmlri1O26ndIN7XYs48Rhi5zYfCuZs+wpWtLP9r7NsTT7o3OsmpZXYePK8Ul7k+gIQ9gCg0O8q55ajeCoU5DpAUkCd5STcFcaPKK4dsqISTX02CLV+osjnotfKhcP0pZtAjLuDH30Kx3GKBE2K89yODw+qT40M9GplALpJr5E8a662uc73ah3GkckpuoC5GHlw8f+g8rxpvSfnOdFpbLP4JsyUlPp13050T3g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=X5P5uPbAbhDKySe71LNaSPvLcRrA4eEL/BIKrVvc1Hc=; b=ndnN/n9wNhMqfsWFNC+dnYefjt1Hvn9hA7WLWefWRTV17gUwZsJNvJzU3B0/h4KQJGbUUYd7lHUKb2pDAXR8LUkdcaccbklIVH93Ma30EwnLC4KPsAoD1T5ghC7DQd7qwMI5243mHZ+Vw+GAFtP8gwCuGtwTCTn8KuPxVgY4sn5tKqHgfZlxlmBLj7B0eHY2UojJhZJ4SZUVfu2+ycjoTLDiavwMvBiXL2aadH0LUPAKDeHSSc3xkrd05qMWDkSszGlkFarPL6eKi/TG67lQ6PiSNCz5m5Xwnd+lfCeZxoGCikqwyA4unDEo5oX3b8jEJj5Wx7k+oDaz3teoWOUJYQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nokia.com; dmarc=pass action=none header.from=nokia.com; dkim=pass header.d=nokia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nokia.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=X5P5uPbAbhDKySe71LNaSPvLcRrA4eEL/BIKrVvc1Hc=; b=f+hdU/BYGLztmpIg2jDw2dbBjDNbO9PHcPjpIMD7EJS1dlqXqbdsABySF/PGsxzOJ9GC6BcSmfbbi97CFRrtbnualAz26ukM8hGGbXfX2z8mRGAloZS8QdsT6QMQA0X+4pK2op1n8bd7errHUcjHKswcy1AyNxySAXSs3y9bjru7OO57bTiaKceQ2ur3wMcCdQSJOiMUhgXNKfib/xNpUOPZqHJ20w1fWYhamYGjWL/qiHYas6QTQD1hP0Jp3E2Zj8ITOBlubBKPSQbMbb/Yk5Ni4xTSdONnWsAhNzKeQBBZEQESi1aPI7vO0DjwfEMpT88SVyb1gPO+tT+eB96dPg== Received: from GV2PR07MB11919.eurprd07.prod.outlook.com (2603:10a6:150:357::20) by AM9PR07MB7219.eurprd07.prod.outlook.com (2603:10a6:20b:2d1::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.451.24; Tue, 29 Sep 2026 13:12:50 +0000 Received: from GV2PR07MB11919.eurprd07.prod.outlook.com ([fe80::159a:9a82:1362:e680]) by GV2PR07MB11919.eurprd07.prod.outlook.com ([fe80::159a:9a82:1362:e680%3]) with mapi id 15.21.0451.022; Tue, 29 Sep 2026 13:12:50 +0000 From: "Jakub Szczudlo (Nokia)" To: "openembedded-core@lists.openembedded.org" CC: "yoann.congal@smile.fr" , "Jakub Szczudlo (Nokia)" Subject: [scarthgap][PATCH v2 5/5] gnutls: fix CVE-2026-5260 Thread-Topic: [scarthgap][PATCH v2 5/5] gnutls: fix CVE-2026-5260 Thread-Index: AQHdUBQ6f3es5YU3qECvYqNmpNcNrw== Date: Tue, 29 Sep 2026 13:12:49 +0000 Message-ID: <20260929131131.246533-5-jakub.szczudlo@nokia.com> References: <20260929131131.246533-1-jakub.szczudlo@nokia.com> In-Reply-To: <20260929131131.246533-1-jakub.szczudlo@nokia.com> Accept-Language: en-US, en-150 Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nokia.com; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: GV2PR07MB11919:EE_|AM9PR07MB7219:EE_ x-ms-office365-filtering-correlation-id: 44ba82d2-162f-4e2c-8ed2-08df1e2b5cd3 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|366016|376014|1800799024|23010399003|6133799003|29003799003|10067099003|11063799006|56012099006|12006099003|25016099003|13003099007|18002099003|22082099003|38070700021|260925021311599003|260925021911599003|260925022911599003; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:GV2PR07MB11919.eurprd07.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(376014)(1800799024)(23010399003)(6133799003)(29003799003)(10067099003)(11063799006)(56012099006)(12006099003)(25016099003)(13003099007)(18002099003)(22082099003)(38070700021)(260925021311599003)(260925021911599003)(260925022911599003);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?q?CKuFoxj+kcHi0Zc046+2XqJgAoBM?= =?utf-8?q?FabY+iBb81mD5Bt87otIYsK3ozFHQTBN/WaUhQpW53cCqu1AsXaFdKhcd9EoEVo2Z?= =?utf-8?q?injnF8YtLRttSYGuvpPNBtX+zDc+oyDkUWgnEWP1uE53lfv1jbPf9ZxJMxDlEo09J?= =?utf-8?q?H8UymPBA+5lLWKXGfpJJMHdt20YaXt59zf/4UAtUU2nPVTCbnaP+BuutktX1CiuSs?= =?utf-8?q?OLYrTrM7y0IL0pSYB6VHS0CDDH7wwVCjzoIgELbYIvzsQR+EW9i8HqozhP9hhQTlc?= =?utf-8?q?xm4V1eEyFmYJ/9xgg3eeGrPazhFzYrEBDN4hbqi/qenwkmhTaj04qEU+OkFCiE+qK?= =?utf-8?q?aGxqtDbrUvJKWDarZbKhYPBTlgDlEez2dI/HqUMZ1J405ns12O9s9Vs8/GS1dAYQI?= =?utf-8?q?klHm4H3uMveojDh9FlwJ8hO9zEFUlzLNl73k32Ma6mbXUxTUQF5/if1pmmiAOhM7t?= =?utf-8?q?6db8GfPITrGM0zI5ALjxo58JT//+UMnIAuLEcqnJKBQzrCId1JiP3jq2lO9PBW10g?= =?utf-8?q?fb6Wbt8c8b40xz4VAb0SPY+e0Wy9IW+X68sQLibrAD6bacTVyhVjfTdzAuc3CIAlD?= =?utf-8?q?IMcZ/zBSDfjIwz2JFimsnQKovUxnmIoSs9ympd0y9jEUiXih+xJiE7X09p9zZVJwr?= =?utf-8?q?pnsbHuiiZUDHzUJSeWyeJej/c7idm2R3ZcgPRJfLVpUs13hFb11uQJun0dYtdGGjl?= =?utf-8?q?/Dw5WKCAmvBDQiJvgfstMdnhpcVEJljlliT+kNOU3Eect0d9XtK24ITsbNu099jtq?= =?utf-8?q?wwG73I5pInXX+yICqNz0NC66AiiugOby013LVVVuI9xyrDc+CBiXm4tUHMa44Yzo1?= =?utf-8?q?urgFlQrpyqbgpNtk0Xj/a9hHzWhi0c27TIVFWMUpulKyq8FtBOVHxRio0k940eo8N?= =?utf-8?q?KVv+FwaMQLPcDcjOg54IP4RjhzwW27ZJWb0c3QpOWBULC01F8YQKJe/RNWGzRH9Sw?= =?utf-8?q?ufyKiBiuVs9LWpiQP8nVhDs3EA3KRly23nZRuxP/4leIRoNKrb0uGvTIco/NVhLT1?= =?utf-8?q?E1miaLF01CtXpcCt4I+wKGBEdfkBLjKPNw7/ddPQDRGVGOvONcgaTocu4TC5VTkCA?= =?utf-8?q?HPQhDwE7tg9GVJGkuFIt9iomHWwGV2TQQgAclEpB2OhhFlKESfxBE79tjL4HMdu8T?= =?utf-8?q?xyiXpuPKFeJgTEQk47QGpPlSUQXzixYGEfNnke2eOExnNmYSpCRu05XCqHcgRPDrI?= =?utf-8?q?zI+NScp+69Att1f8yBt5bh9ph2BM/rt2EFLLS+z6lP9ErdH0G7VtvZVmJf/PJMsG/?= =?utf-8?q?7T99X0ZVrEZrE9cTCQyUAw2NjgBvzdrHR55Lyv8D3OsM69E13BGbZSMSutpEkfoQ0?= =?utf-8?q?0bdp6ymcpx88Ohy9ICjhu42tQ5h7PzCCnsM59tAtVslEO6SiPB+igUptIujWPkfmr?= =?utf-8?q?XSk43dAASWUER0DCvDtYPtH488KTLmagtTMNMhH80g9DbMO6N7Zor9RE4XR7AIim3?= =?utf-8?q?eOtE+eQ2IKlAPrMDw+z6YyK93jBOsA5RTKC4WK5vH9SUJLxT1cx/QusXdVj+JS9Sr?= =?utf-8?q?4RnVRyTN6S+Dh5Q6w6tfc732r36NtXhly8ve9GmVY6XL03h8ldaO81hfCtczKUgsC?= =?utf-8?q?A93+RXm66Fk0x5ZS+oTWXGKEIlaivHRbbKZy+Uv81Ir+3FAiH1cllOYgF/0HiJySr?= =?utf-8?q?Rm2qbwDlT7MVE7binLwXRrwBKqbFvJpw=3D=3D?= MIME-Version: 1.0 X-OriginatorOrg: nokia.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: GV2PR07MB11919.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 44ba82d2-162f-4e2c-8ed2-08df1e2b5cd3 X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Sep 2026 13:12:49.9661 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5d471751-9675-428d-917b-70f44f9630b0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: XShlqbH9Bbj9KyZo8g6i+vDlC84L1CSqFGUwVHr1iHLcWDzlLsbrQmN+8m6IhaIlIxjN8Q87eo94BzKZFbkJsAa3YLZGJPq1F2CnLw9xW/o= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9PR07MB7219 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 29 Sep 2026 13:12:56 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/246867 Backport patch to fix CVE-2026-5260. References: https://nvd.nist.gov/vuln/detail/CVE-2026-5260 Upstream fix: https://gitlab.com/gnutls/gnutls/-/commit/77228f2d1ac207d2f894e5a168fbb47e5378e42f https://gitlab.com/gnutls/gnutls/-/commit/cf6bdc5e4df49e5583d3fb4d2296779785f10683 Tested with ptest Signed-off-by: Jakub Szczudlo --- .../gnutls/gnutls/CVE-2026-5260_p1.patch | 69 +++++++++++++++++++ .../gnutls/gnutls/CVE-2026-5260_p2.patch | 33 +++++++++ meta/recipes-support/gnutls/gnutls_3.8.4.bb | 2 + 3 files changed, 104 insertions(+) create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-5260_p1.patch create mode 100644 meta/recipes-support/gnutls/gnutls/CVE-2026-5260_p2.patch diff --git a/meta/recipes-support/gnutls/gnutls/CVE-2026-5260_p1.patch b/meta/recipes-support/gnutls/gnutls/CVE-2026-5260_p1.patch new file mode 100644 index 0000000000..f7e6f978b1 --- /dev/null +++ b/meta/recipes-support/gnutls/gnutls/CVE-2026-5260_p1.patch @@ -0,0 +1,69 @@ +From 77228f2d1ac207d2f894e5a168fbb47e5378e42f Mon Sep 17 00:00:00 2001 +From: Alexander Sosedkin +Date: Mon, 30 Mar 2026 17:31:07 +0200 +Subject: [PATCH] lib/auth/rsa: check that ciphertext matches the modulus size + +A client sending extremely short premaster secret as part of an +RSA key exchange could've theoretically triggered a short heap overread +to nowhere when the RSA key was backed with a PKCS#11 token. +With this fix, the internal decryption function will not be called +with an mismatching plaintext length specified, avoiding the overread. + +Reported-by: Joshua Rogers of AISLE Research Team +Fixes: #1814 +Fixes: CVE-2026-5260 +Fixes: GNUTLS-SA-2026-04-29-10 +CVSS: 5.9 Medium CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H +Signed-off-by: Alexander Sosedkin + +CVE: CVE-2026-5260 +Upstream-Status: Backport [https://gitlab.com/gnutls/gnutls/-/commit/77228f2d1ac207d2f894e5a168fbb47e5378e42f] + +Signed-off-by: Jakub Szczudlo +--- +diff --git a/lib/auth/rsa.c b/lib/auth/rsa.c +index b5ecc09..24c1649 100644 +--- a/lib/auth/rsa.c ++++ b/lib/auth/rsa.c +@@ -158,6 +158,7 @@ static int proc_rsa_client_kx(gnutls_session_t session, uint8_t *data, + int ret, dsize; + ssize_t data_size = _data_size; + volatile uint8_t ver_maj, ver_min; ++ unsigned int key_bits; + + #ifdef ENABLE_SSL3 + if (get_num_version(session) == GNUTLS_SSL3) { +@@ -180,6 +181,10 @@ static int proc_rsa_client_kx(gnutls_session_t session, uint8_t *data, + } + ciphertext.size = dsize; + } ++ gnutls_privkey_get_pk_algorithm(session->internals.selected_key, ++ &key_bits); ++ if (ciphertext.size != (key_bits + 7) / 8) ++ return gnutls_assert_val(GNUTLS_E_DECRYPTION_FAILED); + + ver_maj = _gnutls_get_adv_version_major(session); + ver_min = _gnutls_get_adv_version_minor(session); +diff --git a/lib/auth/rsa_psk.c b/lib/auth/rsa_psk.c +index 399fb4d..7a99d87 100644 +--- a/lib/auth/rsa_psk.c ++++ b/lib/auth/rsa_psk.c +@@ -257,6 +257,7 @@ static int _gnutls_proc_rsa_psk_client_kx(gnutls_session_t session, + ssize_t data_size = _data_size; + gnutls_psk_server_credentials_t cred; + volatile uint8_t ver_maj, ver_min; ++ unsigned int rsa_key_bits; + + cred = (gnutls_psk_server_credentials_t)_gnutls_get_cred( + session, GNUTLS_CRD_PSK); +@@ -313,6 +314,10 @@ static int _gnutls_proc_rsa_psk_client_kx(gnutls_session_t session, + return GNUTLS_E_UNEXPECTED_PACKET_LENGTH; + } + ciphertext.size = dsize; ++ gnutls_privkey_get_pk_algorithm(session->internals.selected_key, ++ &rsa_key_bits); ++ if (ciphertext.size != (rsa_key_bits + 7) / 8) ++ return gnutls_assert_val(GNUTLS_E_DECRYPTION_FAILED); + + ver_maj = _gnutls_get_adv_version_major(session); + ver_min = _gnutls_get_adv_version_minor(session); diff --git a/meta/recipes-support/gnutls/gnutls/CVE-2026-5260_p2.patch b/meta/recipes-support/gnutls/gnutls/CVE-2026-5260_p2.patch new file mode 100644 index 0000000000..fd94c64b6c --- /dev/null +++ b/meta/recipes-support/gnutls/gnutls/CVE-2026-5260_p2.patch @@ -0,0 +1,33 @@ +From cf6bdc5e4df49e5583d3fb4d2296779785f10683 Mon Sep 17 00:00:00 2001 +From: Alexander Sosedkin +Date: Mon, 30 Mar 2026 17:46:40 +0200 +Subject: [PATCH] lib/pkcs11_privkey: guard against overreading on short + ciphertexts + +This is an alternative fix for the callee side. + +Reported-by: Joshua Rogers of AISLE Research Team +Fixes: #1814 +Fixes: CVE-2026-5260 +Fixes: GNUTLS-SA-2026-04-29-10 +CVSS: 5.9 Medium CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H +Signed-off-by: Alexander Sosedkin + +CVE: CVE-2026-5260 +Upstream-Status: Backport [https://gitlab.com/gnutls/gnutls/-/commit/cf6bdc5e4df49e5583d3fb4d2296779785f10683] + +Signed-off-by: Jakub Szczudlo +--- +diff --git a/lib/pkcs11_privkey.c b/lib/pkcs11_privkey.c +index 5093a6d..369b034 100644 +--- a/lib/pkcs11_privkey.c ++++ b/lib/pkcs11_privkey.c +@@ -826,7 +826,7 @@ int _gnutls_pkcs11_privkey_decrypt_data2(gnutls_pkcs11_privkey_t key, + if (ret != 0) + return gnutls_assert_val(GNUTLS_E_LOCKING_ERROR); + +- buffer = gnutls_malloc(siglen); ++ buffer = gnutls_malloc(MAX((size_t)siglen, plaintext_size)); + if (!buffer) { + gnutls_assert(); + return GNUTLS_E_MEMORY_ERROR; diff --git a/meta/recipes-support/gnutls/gnutls_3.8.4.bb b/meta/recipes-support/gnutls/gnutls_3.8.4.bb index bb9bc0af05..7f7f9c9c05 100644 --- a/meta/recipes-support/gnutls/gnutls_3.8.4.bb +++ b/meta/recipes-support/gnutls/gnutls_3.8.4.bb @@ -60,6 +60,8 @@ SRC_URI = "https://www.gnupg.org/ftp/gcrypt/gnutls/v${SHRT_VER}/gnutls-${PV}.tar file://CVE-2026-42013.patch \ file://CVE-2026-42014.patch \ file://CVE-2026-42015.patch \ + file://CVE-2026-5260_p1.patch \ + file://CVE-2026-5260_p2.patch \ " SRC_URI[sha256sum] = "2bea4e154794f3f00180fa2a5c51fe8b005ac7a31cd58bd44cdfa7f36ebc3a9b"