CVE-2024-26584: net: tls: handle backlogging of crypto requests
In the Linux kernel, the following vulnerability has been resolved:
net: tls: handle backlogging of crypto requests
Since we're setting the CRYPTOTFMREQMAYBACKLOG flag on our requests to the crypto API, cryptoaead{encrypt,decrypt} can return -EBUSY instead of -EINPROGRESS in valid situations. For example, when the cryptd queue for AESNI is full (easy to trigger with an artificially low cryptd.cryptdmaxcpuqlen), requests will be enqueued to the backlog but still processed. In that case, the async callback will also be called twice: first with err == -EINPROGRESS, which it seems we can just ignore, then with err == 0.
Compared to Sabrina's original patch this version uses the new tlscryptasyncwait() helpers and converts the EBUSY to EINPROGRESS to avoid having to modify all the error handling paths. The handling is identical.
Other sources
Linux Kernel is vulnerable to a denial of service, caused by a flaw when setting the CRYPTOTFMREQMAYBACKLOG flag on requests to the crypto API in the tls subsystem. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service condition.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26584?
CVE-2024-26584 has been categorized as a high-severity vulnerability due to potential impact on cryptographic operations.
How do I fix CVE-2024-26584?
To mitigate CVE-2024-26584, update your Linux kernel to version 6.8 or any recommended patched version listed by your distribution.
What software is affected by CVE-2024-26584?
CVE-2024-26584 affects various versions of the Linux kernel, particularly versions 4.16.0 to 6.7.6 and 6.2.0 to 6.6.18.
Is CVE-2024-26584 remotely exploitable?
CVE-2024-26584 is not considered remotely exploitable, as it requires local access to exploit the vulnerability.
What type of vulnerability is CVE-2024-26584?
CVE-2024-26584 is classified as a vulnerability related to cryptographic request handling in the Linux kernel.