CVE-2024-56690

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-56690
In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY Since commit 8f4f68e788c3 ("crypto: pcrypt - Fix hungtask for PADATA_RESET"), the pcrypt encryption and decryption operations return -EAGAIN when the CPU goes online or offline. In alg_test(), a WARN is generated when pcrypt_aead_decrypt() or pcrypt_aead_encrypt() returns -EAGAIN, the unnecessary panic will occur when panic_on_warn set 1. Fix this issue by calling crypto layer directly without parallelization in that case.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/5edae7a9a35606017ee6e05911c290acee9fee5a Patch
https://git.kernel.org/stable/c/662f2f13e66d3883b9238b0b96b17886179e60e2 Patch
https://git.kernel.org/stable/c/7ddab756f2de5b7b43c122ebebdf37f400fb2b6f Patch
https://git.kernel.org/stable/c/92834692a539b5b7f409e467a14667d64713b732 Patch
https://git.kernel.org/stable/c/96001f52ae8c70e2c736d3e1e5dc53d5b521e5ca Patch
https://git.kernel.org/stable/c/a8e0074ffb38c9a5964a221bb998034d016c93a2 Patch
https://git.kernel.org/stable/c/a92ccd3618e42333ac6f150ecdac14dca298bc7a Patch
https://git.kernel.org/stable/c/dd8bf8eb5beba1e7c3b11a9a5a58ccbf345a69e6 Patch
https://git.kernel.org/stable/c/fca8aed12218f96b38e374ff264d78ea1fbd23cc Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

06 Oct 2025, 17:40

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/5edae7a9a35606017ee6e05911c290acee9fee5a - () https://git.kernel.org/stable/c/5edae7a9a35606017ee6e05911c290acee9fee5a - Patch
References () https://git.kernel.org/stable/c/662f2f13e66d3883b9238b0b96b17886179e60e2 - () https://git.kernel.org/stable/c/662f2f13e66d3883b9238b0b96b17886179e60e2 - Patch
References () https://git.kernel.org/stable/c/7ddab756f2de5b7b43c122ebebdf37f400fb2b6f - () https://git.kernel.org/stable/c/7ddab756f2de5b7b43c122ebebdf37f400fb2b6f - Patch
References () https://git.kernel.org/stable/c/92834692a539b5b7f409e467a14667d64713b732 - () https://git.kernel.org/stable/c/92834692a539b5b7f409e467a14667d64713b732 - Patch
References () https://git.kernel.org/stable/c/96001f52ae8c70e2c736d3e1e5dc53d5b521e5ca - () https://git.kernel.org/stable/c/96001f52ae8c70e2c736d3e1e5dc53d5b521e5ca - Patch
References () https://git.kernel.org/stable/c/a8e0074ffb38c9a5964a221bb998034d016c93a2 - () https://git.kernel.org/stable/c/a8e0074ffb38c9a5964a221bb998034d016c93a2 - Patch
References () https://git.kernel.org/stable/c/a92ccd3618e42333ac6f150ecdac14dca298bc7a - () https://git.kernel.org/stable/c/a92ccd3618e42333ac6f150ecdac14dca298bc7a - Patch
References () https://git.kernel.org/stable/c/dd8bf8eb5beba1e7c3b11a9a5a58ccbf345a69e6 - () https://git.kernel.org/stable/c/dd8bf8eb5beba1e7c3b11a9a5a58ccbf345a69e6 - Patch
References () https://git.kernel.org/stable/c/fca8aed12218f96b38e374ff264d78ea1fbd23cc - () https://git.kernel.org/stable/c/fca8aed12218f96b38e374ff264d78ea1fbd23cc - Patch
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: crypto: pcrypt - Llamar a la capa de cifrado directamente cuando padata_do_parallel() devuelve -EBUSY Desde el commit 8f4f68e788c3 ("crypto: pcrypt - Fix hungtask for PADATA_RESET"), las operaciones de cifrado y descifrado de pcrypt devuelven -EAGAIN cuando la CPU se conecta o desconecta. En alg_test(), se genera una ADVERTENCIA cuando pcrypt_aead_decrypt() o pcrypt_aead_encrypt() devuelve -EAGAIN, el pánico innecesario ocurrirá cuando panic_on_warn se establezca en 1. Solucione este problema llamando a la capa de cifrado directamente sin paralelización en ese caso.
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

28 Dec 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-28 10:15

Updated : 2025-10-06 17:40

NVD link : CVE-2024-56690

Mitre link : CVE-2024-56690

CVE.ORG link : CVE-2024-56690

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo