CVE-2024-56690

MEDIUM

Linux Kernel 4.14.331-4.15 - Denial of Service via Padata Parallelization Reset

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY Since commit 8f4f68e788c3 ("crypto: pcrypt - Fix hungtask for PADATA_RESET"), the pcrypt encryption and decryption operations return -EAGAIN when the CPU goes online or offline. In alg_test(), a WARN is generated when pcrypt_aead_decrypt() or pcrypt_aead_encrypt() returns -EAGAIN, the unnecessary panic will occur when panic_on_warn set 1. Fix this issue by calling crypto layer directly without parallelization in that case.

Scores

CVSS v3 5.5
EPSS 0.0019
EPSS Percentile 8.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (38)
linux/Kernel < 4.19.325linux
linux/Kernel 4.20.0 - 5.4.287linux
linux/Kernel 5.11.0 - 5.15.174linux
linux/Kernel 5.16.0 - 6.1.120linux
linux/Kernel 5.5.0 - 5.10.231linux
linux/Kernel 6.2.0 - 6.6.64linux
linux/Kernel 6.7.0 - 6.12.2linux
Linux/Linux < 6.7
Linux/Linux 039fec48e062504f14845124a1a25eb199b2ddc0 - dd8bf8eb5beba1e7c3b11a9a5a58ccbf345a69e6
Linux/Linux 372636debe852913529b1716f44addd94fff2d28 - 5edae7a9a35606017ee6e05911c290acee9fee5a
... and 28 more
Published Dec 28, 2024
Tracked Since Feb 18, 2026