VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 27, 2025· Updated Aug 4, 2026

CVE-2024-58008

CVE-2024-58008

Description

In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y

With vmalloc stack addresses enabled (CONFIG_VMAP_STACK=y) DCP trusted keys can crash during en- and decryption of the blob encryption key via the DCP crypto driver. This is caused by improperly using sg_init_one() with vmalloc'd stack buffers (plain_key_blob).

Fix this by always using kmalloc() for buffers we give to the DCP crypto driver.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Linux/Kernel8 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.10.7,<6.11
    • cpe:2.3:o:linux:linux_kernel:6.11:-:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.11:rc4:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.11:rc5:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.11:rc6:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.11:rc7:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 6.11
  • osv-coords2 versions
    pkg:deb/ubuntu/[email protected]?arch=source&distro=oracularpkg:linux/kernel
    < 6.11.0-1014.15+ 1 more
    • (no CPE)range: < 6.11.0-1014.15
    • (no CPE)range: >= 6.11.0, < 6.12.14

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.