Summary

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly. 

Products Affected

• Brocade SANnav base OS (OVA deployment)  before 3.0.0a and SANnav 3.0.0 through 3.0.1
  Vulnerable if user sannavmgr account is compromised, otherwise Vulnerable_code_cannot_be_controlled_by_adversary
• Brocade ASCG base OS (OVA deployment) before 3.4.0c

Products Confirmed Not Affected

• Brocade ASCG Standard versions
  [VEX Justification: Vulnerable_code_not_in_execute_path]
• Brocade Fabric OS  is not exploitable. [VEX Justification: Vulnerable_code_not_present] 
• Brocade SANnav Standard versions
  [VEX Justification: Vulnerable_code_not_in_execute_path]

Solution

• Security update provided in Brocade SANnav 3.0.0a base OS (OVA deplpyment)
• Security update also provided in Brocade SANnav OVA OS patch for 8.x OS (sannav_ova_8x_os_06_2026) that can be applied to SANnav 2.4.0b
• Security update also provided in Brocade SANnav OVA OS patch for 9x OS (sannav_ova_9x_os_06_2026) that can be applied to SANnav 3.0.1
• Security update is provided in Brocade ASCG base OS (OVA Deployment) 3.4.0c

Revision History

Disclaimer

THIS DOCUMENT IS PROVIDED ON AN AS-IS BASIS SOLELY FOR INFORMATIONAL PURPOSES AND DOES NOT IMPLY ANY KIND OF GUARANTY OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. YOUR USE OF THE INFORMATION CONTAINED HEREIN IS AT YOUR OWN RISK. ALL INFORMATION PROVIDED HEREIN IS BASED ON BROCADE'S CURRENT KNOWLEDGE AND UNDERSTANDING OF THE VULNERABILITY AND IMPACT TO BROCADE HARDWARE AND SOFTWARE PRODUCTS. BROCADE RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.