IT

Tracker / CVE-2024-56690

CVE-2024-56690

Medium 5.5

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY Since commit 8f4f68e788c3 ("crypto: pcrypt - Fix hungtask for PADATA_RESET"), the pcrypt encryption and decryption operations return -EAGAIN when the CPU goes online or offline. In alg_test(), a WARN is generated when pcrypt_aead_decrypt() or pcrypt_aead_encrypt() returns -EAGAIN, the unnecessary panic will occur when panic_on_warn set 1. Fix this issue by calling crypto layer directly without parallelization in that case.

Affected products and versions

linux linux_kernel · 4.14.331 → 4.15
linux linux_kernel · 4.19.300 → 4.19.325
linux linux_kernel · 5.10.202 → 5.10.231
linux linux_kernel · 5.15.140 → 5.15.174
linux linux_kernel · 5.4.262 → 5.4.287
linux linux_kernel · 6.1.64 → 6.1.120
linux linux_kernel · 6.12 → 6.12.2
linux linux_kernel · 6.5.13 → 6.6
linux linux_kernel · 6.6.3 → 6.6.64
linux linux_kernel · 6.7 → 6.11.11

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References