CVE-2024-58008

CVE-2024-58008 affects the Linux kernel in the DCP crypto driver when vmalloc stack is enabled (CONFIG_VMAP_STACK=y). The issue stems from improper use of sg_init_one() with vmalloc’d stack buffers (plain_key_blob) during encryption key processing, which can cause a crash during en- and decryptio...

PT-2025-8830 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been identified where DCP trusted keys can crash during encryption and decryption of the blob encryption key via the DCP crypto driver when vmalloc stac...