CVE-2024-26753: crypto: virtio/akcipher - Fix stack overflow on memcpy
In the Linux kernel, the following vulnerability has been resolved:
crypto: virtio/akcipher - Fix stack overflow on memcpy
sizeof(struct virtiocryptoakciphersessionpara) is less than sizeof(struct virtiocryptoopctrlreq::u), copying more bytes from stack variable leads stack overflow. Clang reports this issue by commands: make -j CC=clang-14 mrproper >/dev/null 2>&1 make -j O=/tmp/crypto-build CC=clang-14 allmodconfig >/dev/null 2>&1 make -j O=/tmp/crypto-build W=1 CC=clang-14 drivers/crypto/virtio/ virtiocryptoakcipheralgs.o
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26753?
CVE-2024-26753 has been classified as a high severity vulnerability due to the potential for stack overflow.
How do I fix CVE-2024-26753?
To mitigate CVE-2024-26753, update your Linux kernel to the latest version that addresses this vulnerability.
What versions of the Linux kernel are affected by CVE-2024-26753?
CVE-2024-26753 affects various versions of the Linux kernel ranging from 5.10.209 to 6.8-rc5.
What type of vulnerability is CVE-2024-26753?
CVE-2024-26753 is a stack overflow vulnerability in the Linux kernel's crypto: virtio/akcipher module.
Can CVE-2024-26753 be exploited remotely?
Yes, CVE-2024-26753 can potentially be exploited remotely by an attacker to cause a denial of service.