CVE-2024-50281: KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation
In the Linux kernel, the following vulnerability has been resolved:
KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation
When sealing or unsealing a key blob we currently do not wait for the AEAD cipher operation to finish and simply return after submitting the request. If there is some load on the system we can exit before the cipher operation is done and the buffer we read from/write to is already removed from the stack. This will e.g. result in NULL pointer dereference errors in the DCP driver during blob creation.
Fix this by waiting for the AEAD cipher operation to finish before resuming the seal and unseal calls.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50281?
CVE-2024-50281 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-50281?
To fix CVE-2024-50281, update your Linux kernel to the latest stable version that addresses this vulnerability.
What systems are affected by CVE-2024-50281?
CVE-2024-50281 affects multiple versions of the Linux kernel, including versions 6.10.7 and 6.12-rc1 to 6.12-rc6.
What is the nature of the vulnerability in CVE-2024-50281?
CVE-2024-50281 involves a NULL dereference in the AEAD crypto operation when sealing or unsealing a key blob.
Are there any known exploits for CVE-2024-50281?
As of now, there are no publicly known exploits specifically targeting CVE-2024-50281.