CVE-2024-58008

CVE-2024-58008 affects the Linux kernel where, with CONFIG_VMAP_STACK=y, the DCP crypto driver can crash while encrypting/decrypting the blob key due to improper use of sg_init_one() on vmalloc’d buffers (plain_key_blob). The fix is to always use kmalloc() for buffers given to the DCP crypto driv...

PT-2025-8830 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been identified where DCP trusted keys can crash during encryption and decryption of the blob encryption key via the DCP crypto driver when vmalloc stac...