CVE-2024-58008
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/02/2025
Last modified:
27/02/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y<br />
<br />
With vmalloc stack addresses enabled (CONFIG_VMAP_STACK=y) DCP trusted<br />
keys can crash during en- and decryption of the blob encryption key via<br />
the DCP crypto driver. This is caused by improperly using sg_init_one()<br />
with vmalloc&#39;d stack buffers (plain_key_blob).<br />
<br />
Fix this by always using kmalloc() for buffers we give to the DCP crypto<br />
driver.