SUSE CVE-2024-50281

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation When sealing or unsealing a key blob we currently do not wait for the AEAD cipher operation to finish and simply return after submitting the request. If there is...

DEBIAN-CVE-2024-50281

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation When sealing or unsealing a key blob we currently do not wait for the AEAD cipher operation to finish and simply return after submitting the request. If there is...

CVE-2024-50281

In CVE-2024-50281, the Linux kernel vulnerability affects the KEYS: trusted: dcp path where sealing/unsealing a key blob could exit before the AEAD cipher operation completes, risking NULL dereference in the DCP driver when the buffer has been removed from the stack. The underlying cause is not w...