CVE-2024-26824
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - Remove bogus SGL free on zero-length error path When a zero-length message is hashed by algif_hash, and an error is triggered, it tries to free an SG list that was…
Does this matter?
Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - Remove bogus SGL free on zero-length error path When a zero-length message is hashed by algif_hash, and an error is triggered, it tries to free an SG list that was never allocated in the first place. Fix this by not freeing the SG list on the zero-length error path.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.24% probability · 15th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/24c890dd712f6345e382256cae8c97abb0406b70Patch
- https://git.kernel.org/stable/c/775f3c1882a493168e08fdb8cde0865c8f3a8a29Patch
- https://git.kernel.org/stable/c/9c82920359b7c1eddaf72069bcfe0ffddf088cd0Patch
- https://git.kernel.org/stable/c/24c890dd712f6345e382256cae8c97abb0406b70Patch
- https://git.kernel.org/stable/c/775f3c1882a493168e08fdb8cde0865c8f3a8a29Patch
- https://git.kernel.org/stable/c/9c82920359b7c1eddaf72069bcfe0ffddf088cd0Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.