CVE-2024-56690
MEDIUMLinux Kernel 4.14.331-4.15 - Denial of Service via Padata Parallelization Reset
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY Since commit 8f4f68e788c3 ("crypto: pcrypt - Fix hungtask for PADATA_RESET"), the pcrypt encryption and decryption operations return -EAGAIN when the CPU goes online or offline. In alg_test(), a WARN is generated when pcrypt_aead_decrypt() or pcrypt_aead_encrypt() returns -EAGAIN, the unnecessary panic will occur when panic_on_warn set 1. Fix this issue by calling crypto layer directly without parallelization in that case.
References (11)
Core 11
Core References
Scores
CVSS v3
5.5
EPSS
0.0019
EPSS Percentile
8.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (38)
linux/Kernel
< 4.19.325linux
linux/Kernel
4.20.0 - 5.4.287linux
linux/Kernel
5.11.0 - 5.15.174linux
linux/Kernel
5.16.0 - 6.1.120linux
linux/Kernel
5.5.0 - 5.10.231linux
linux/Kernel
6.2.0 - 6.6.64linux
linux/Kernel
6.7.0 - 6.12.2linux
Linux/Linux
< 6.7
Linux/Linux
039fec48e062504f14845124a1a25eb199b2ddc0 - dd8bf8eb5beba1e7c3b11a9a5a58ccbf345a69e6
Linux/Linux
372636debe852913529b1716f44addd94fff2d28 - 5edae7a9a35606017ee6e05911c290acee9fee5a
... and 28 more
Published
Dec 28, 2024
Tracked Since
Feb 18, 2026