This is a note to let you know that I've just added the patch titled crypto: aesni - xts_crypt() return if walk.nbytes is 0 to the 5.14-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: crypto-aesni-xts_crypt-return-if-walk.nbytes-is-0.patch and it can be found in the queue-5.14 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From 72ff2bf04db2a48840df93a461b7115900f46c05 Mon Sep 17 00:00:00 2001 From: Shreyansh Chouhan <chouhan.shreyansh630@xxxxxxxxx> Date: Sun, 22 Aug 2021 09:15:14 +0530 Subject: crypto: aesni - xts_crypt() return if walk.nbytes is 0 From: Shreyansh Chouhan <chouhan.shreyansh630@xxxxxxxxx> commit 72ff2bf04db2a48840df93a461b7115900f46c05 upstream. xts_crypt() code doesn't call kernel_fpu_end() after calling kernel_fpu_begin() if walk.nbytes is 0. The correct behavior should be not calling kernel_fpu_begin() if walk.nbytes is 0. Reported-by: syzbot+20191dc583eff8602d2d@xxxxxxxxxxxxxxxxxxxxxxxxx Signed-off-by: Shreyansh Chouhan <chouhan.shreyansh630@xxxxxxxxx> Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- arch/x86/crypto/aesni-intel_glue.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/arch/x86/crypto/aesni-intel_glue.c +++ b/arch/x86/crypto/aesni-intel_glue.c @@ -849,7 +849,7 @@ static int xts_crypt(struct skcipher_req return -EINVAL; err = skcipher_walk_virt(&walk, req, false); - if (err) + if (!walk.nbytes) return err; if (unlikely(tail > 0 && walk.nbytes < walk.total)) { Patches currently in stable-queue which might be from chouhan.shreyansh630@xxxxxxxxx are queue-5.14/crypto-aesni-xts_crypt-return-if-walk.nbytes-is-0.patch