Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-36975

KEYS: trusted: Do not use WARN when encode fails

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Do not use WARN when encode fails When asn1_encode_sequence() fails, WARN is not the correct solution. 1. asn1_encode_sequence() is not an internal function (located in lib/asn1_encode.c). 2. Location is known, which makes the stack trace useless. 3. Results a crash if panic_on_warn is set. It is also noteworthy that the use of WARN is undocumented, and it should be avoided unless there is a carefully considered rationale to use it. Replace WARN with pr_err, and print the return value instead, which is only useful piece of information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f2219745250f388edacabe6cca73654131c67d0a to < 96f650995c70237b061b497c66755e32908f8972affected
  • f2219745250f388edacabe6cca73654131c67d0a to < 681935009fec3fc22af97ee312d4a24ccf3cf087affected
  • f2219745250f388edacabe6cca73654131c67d0a to < 1c652e1e10676f942149052d9329b8bf2703529aaffected
  • f2219745250f388edacabe6cca73654131c67d0a to < d32c6e09f7c4bec3ebc4941323f0aa6366bc1487affected
  • f2219745250f388edacabe6cca73654131c67d0a to < ff91cc12faf798f573dab2abc976c1d5b1862feaaffected
  • f2219745250f388edacabe6cca73654131c67d0a to < 050bf3c793a07f96bd1e2fd62e1447f731ed733baffected

Linux Linux

Default version status: affected

  • 5.13affected
  • 0 to < 5.13unaffected
  • 5.15.160 to ≤ 5.15.*unaffected
  • 6.1.92 to ≤ 6.1.*unaffected
  • 6.6.32 to ≤ 6.6.*unaffected
  • 6.8.11 to ≤ 6.8.*unaffected
  • 6.9.2 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References