CVE-2024-26824

MEDIUM

Linux Kernel 6.5-6.6.17 - Use-After-Free in algif_hash Zero-Length Error Path

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - Remove bogus SGL free on zero-length error path When a zero-length message is hashed by algif_hash, and an error is triggered, it tries to free an SG list that was never allocated in the first place. Fix this by not freeing the SG list on the zero-length error path.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/9c82920359b7c1eddaf72069bcfe0ffddf088cd0

Patch

https://git.kernel.org/stable/c/775f3c1882a493168e08fdb8cde0865c8f3a8a29

Patch

https://git.kernel.org/stable/c/24c890dd712f6345e382256cae8c97abb0406b70

Scores

CVSS v3 5.5

EPSS 0.0023

EPSS Percentile 13.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (12)

linux/Kernel 6.5.0 - 6.6.18linux

linux/Kernel 6.7.0 - 6.7.6linux

Linux/Linux < 6.5

Linux/Linux 6.5

Linux/Linux 6.6.18 - 6.6.*

Linux/Linux 6.7.6 - 6.7.*

Linux/Linux 6.8

Linux/Linux b6d972f6898308fbe7e693bf8d44ebfdb1cd2dc4 - 24c890dd712f6345e382256cae8c97abb0406b70

Linux/Linux b6d972f6898308fbe7e693bf8d44ebfdb1cd2dc4 - 775f3c1882a493168e08fdb8cde0865c8f3a8a29

Linux/Linux b6d972f6898308fbe7e693bf8d44ebfdb1cd2dc4 - 9c82920359b7c1eddaf72069bcfe0ffddf088cd0

... and 2 more

Published Apr 17, 2024

Tracked Since Feb 18, 2026