CVE-2024-58075: crypto: tegra - do not transfer req when tegra init fails
In the Linux kernel, the following vulnerability has been resolved:
crypto: tegra - do not transfer req when tegra init fails
The tegracmacinit or tegrashainit function may return an error when memory is exhausted. It should not transfer the request when they return an error.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58075?
CVE-2024-58075 is classified as a moderate severity vulnerability in the Linux kernel.
What is the impact of CVE-2024-58075?
The impact of CVE-2024-58075 could lead to denial of service due to failure in handling requests when memory is exhausted.
How do I fix CVE-2024-58075?
To fix CVE-2024-58075, you should update to the latest version of the Linux kernel where this vulnerability has been resolved.
Which Linux kernel versions are affected by CVE-2024-58075?
CVE-2024-58075 affects specific versions of the Linux kernel that include the vulnerable tegra_cmac_init and tegra_sha_init functions.
Can CVE-2024-58075 be exploited remotely?
Exploitation of CVE-2024-58075 typically requires local access to the affected system, reducing the risk of remote attacks.