Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-26824

crypto: algif_hash - Remove bogus SGL free on zero-length error path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - Remove bogus SGL free on zero-length error path When a zero-length message is hashed by algif_hash, and an error is triggered, it tries to free an SG list that was never allocated in the first place. Fix this by not freeing the SG list on the zero-length error path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b6d972f6898308fbe7e693bf8d44ebfdb1cd2dc4 to < 9c82920359b7c1eddaf72069bcfe0ffddf088cd0affected
  • b6d972f6898308fbe7e693bf8d44ebfdb1cd2dc4 to < 775f3c1882a493168e08fdb8cde0865c8f3a8a29affected
  • b6d972f6898308fbe7e693bf8d44ebfdb1cd2dc4 to < 24c890dd712f6345e382256cae8c97abb0406b70affected

Linux Linux

Default version status: affected

  • 6.5affected
  • 0 to < 6.5unaffected
  • 6.6.18 to ≤ 6.6.*unaffected
  • 6.7.6 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References