PT-2025-8830 · Linux+3 · Linux Kernel+3

David Gstir + 1 · Published 2025-01-21 · Updated 2025-05-28 · CVE-2024-58008

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified where DCP trusted keys can crash during encryption and decryption of the blob encryption key via the DCP crypto driver when vmalloc stack addresses are enabled. This is caused by improper use of sg init one() with vmalloc'd stack buffers, specifically plain key blob.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-11854

CVE-2024-58008

USN-7521-1

USN-7521-2

USN-7521-3

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 254

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/58xxx/CVE-2024-58008.json · Exploit
• https://ubuntu.com/security/CVE-2025-21826 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21987 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58051 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21853 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21899 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21885 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21851 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21764 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21876 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21891 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21900 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21864 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21787 · Vendor Advisory