CVE-2024-36031: keys: Fix overwrite of key expiration on instantiation
In the Linux kernel, the following vulnerability has been resolved:
keys: Fix overwrite of key expiration on instantiation
The expiry time of a key is unconditionally overwritten during instantiation, defaulting to turn it permanent. This causes a problem for DNS resolution as the expiration set by user-space is overwritten to TIME64MAX, disabling further DNS updates. Fix this by restoring the condition that keysetexpiry is only called when the pre-parser sets a specific expiry.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
keys: Fix overwrite of key expiration on instantiation
The Linux kernel CVE team has assigned CVE-2024-36031 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024053000-CVE-2024-36031-46f2@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36031?
The severity of CVE-2024-36031 is currently classified as high due to the potential impact on key expiration handling in the Linux kernel.
How do I fix CVE-2024-36031?
To fix CVE-2024-36031, upgrade the Linux kernel to version 5.10.223-1 or later, or 5.15.159 or later, or install the recommended patches from your distribution.
Which Linux kernel versions are affected by CVE-2024-36031?
CVE-2024-36031 affects multiple Linux kernel versions, including versions prior to 5.10.217, 5.15.159, 6.1.91, and others specified by your distribution.
What vulnerabilities are related to key management in the Linux kernel?
CVE-2024-36031 is part of a series of vulnerabilities related to key management, specifically affecting key expiration functionality.
Is CVE-2024-36031 a remote exploit risk?
CVE-2024-36031 does not directly involve remote exploitation but can affect systems that rely on proper key management, potentially leading to security risks.