CVE-2024-0641: Kernel: deadlock leading to denial of service in tipc_crypto_key_revoke
A denial of service problem was found in tipccryptokeyrevoke in net/tipc/crypto.c in the Linux kernel’s TIPC subsystem. In this fkaw, a local user privileged guests could trigger deadlock and potentially crash the system.
Reference Link: https://github.com/torvalds/linux/commit/08e50cf071847323414df0835109b6f3560d44f5
Other sources
A denial of service vulnerability was found in tipccryptokeyrevoke in net/tipc/crypto.c in the Linux kernel’s TIPC subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system.
— Launchpad
Kernel: deadlock leading to denial of service in tipccryptokeyrevoke
— Microsoft
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0641?
CVE-2024-0641 has been rated as a denial of service vulnerability that may lead to system crashes.
How do I fix CVE-2024-0641?
To mitigate CVE-2024-0641, update your Linux kernel to version 6.6 or the specified remedial versions for other affected distributions.
What systems are affected by CVE-2024-0641?
CVE-2024-0641 affects multiple versions of the Linux kernel, including versions up to 6.6 and certain builds of Red Hat and Debian.
What causes the CVE-2024-0641 vulnerability?
CVE-2024-0641 is caused by a flaw in the tipc_crypto_key_revoke function, which can lead to deadlock conditions.
Can CVE-2024-0641 be exploited remotely?
CVE-2024-0641 requires local access; thus, it cannot be exploited remotely, as it involves local user privileges.