PT-2024-30677 · Linux · Linux Kernel

Dan Carpenter · Published 2024-07-13 · Updated 2024-08-22 · CVE-2024-43815

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the crypto: mxs-dcp module. The issue allowed stack memory to leak through the payload field when running AES with a key from one of the hardware's key slots. This was fixed by ensuring the payload field is set to 0 in such cases. The common use case, where the key is supplied from main memory via the descriptor payload, is not affected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

BDU:2025-07501

CVE-2024-43815

Affected Products

Linux Kernel

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43815.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2024-43815 · Vendor Advisory
• https://git.kernel.org/stable/c/e1640fed0377bf7276efb70d03cb821a6931063d · Patch
• https://osv.dev/vulnerability/CVE-2024-43815 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43815 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-43815 · Security Note
• https://git.kernel.org/stable/c/dd52b5eeb0f70893f762da7254e923fd23fd1379 · Patch
• https://ubuntu.com/security/CVE-2024-43815 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-43815 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07501 · Security Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.10.3 · Note
• https://lore.kernel.org/linux-cve-announce/2024081720-CVE-2024-43815-38e7@gregkh · Note
• https://twitter.com/CVEnew/status/1824739855869366610 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/dd52b5eeb0f70893f762da7254e923fd23fd1379 · Note