Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-58008

KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y With vmalloc stack addresses enabled (CONFIG_VMAP_STACK=y) DCP trusted keys can crash during en- and decryption of the blob encryption key via the DCP crypto driver. This is caused by improperly using sg_init_one() with vmalloc'd stack buffers (plain_key_blob). Fix this by always using kmalloc() for buffers we give to the DCP crypto driver.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0e28bf61a5f9ab30be3f3b4eafb8d097e39446bb to < 3192f1c54dddb9b5820bf5e8677809949d8e9c66affected
  • 0e28bf61a5f9ab30be3f3b4eafb8d097e39446bb to < 3355594de46fb1cba663f12b9644b664b8a609f4affected
  • 0e28bf61a5f9ab30be3f3b4eafb8d097e39446bb to < e8d9fab39d1f87b52932646b2f1e7877aa3fc0f4affected
  • 9e3b266afcfe4294e84496f50f006f029d3100dbaffected
  • 6.10.7 to < 6.11affected

Linux Linux

Default version status: affected

  • 6.11affected
  • 0 to < 6.11unaffected
  • 6.12.14 to ≤ 6.12.*unaffected
  • 6.13.3 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References