PT-2024-21553 · Linux+5 · Linux Kernel+5
Quanyang Wang
·
Published
2024-01-28
·
Updated
2025-02-03
·
CVE-2024-26877
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel version 6.8.0-rc1-yocto-standard #323
Description
The vulnerability is related to the crypto: xilinx module in the Linux kernel. When calling
crypto finalize request, BH should be disabled to avoid triggering a calltrace. The issue is caused by the lack of BH disabling, which can lead to a warning and a calltrace. The calltrace includes functions such as crypto finalize request, crypto finalize aead request, zynqmp handle aes req, crypto pump work, kthread worker fn, and kthread.Recommendations
To resolve the issue, ensure that BH is disabled when calling
crypto finalize request. This can be achieved by modifying the code to disable BH before calling the function. For Linux kernel version 6.8.0-rc1-yocto-standard #323, update the kernel to a version that includes the fix for this issue. If no specific fix is provided for the kernel version, consider updating to a newer kernel version that includes the necessary patches.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu