Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | grub2: fix CVE-2024-56738 | Ross Burton | 2025-09-11 | 1 | -0/+75 |
Backport an algorithmic change to grub_crypto_memcmp() so that it completes in constant time and thus isn't susceptible to side-channel attacks. (From OE-Core rev: 30a1cc225a2bd5d044bf608d863a67df3f9c03be) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |