CVE-2024-26824

I

n the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - Remove bogus SGL free on zero-length error path When a zero-length message is hashed by algif_hash, and an error is triggered, it tries to free an SG list that was never allocated in the first place. Fix this by not freeing the SG list on the zero-length error path.

Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*

History

27 Mar 2025, 20:56

Type Values Removed Values Added
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
References () https://git.kernel.org/stable/c/24c890dd712f6345e382256cae8c97abb0406b70 - () https://git.kernel.org/stable/c/24c890dd712f6345e382256cae8c97abb0406b70 - Patch
References () https://git.kernel.org/stable/c/775f3c1882a493168e08fdb8cde0865c8f3a8a29 - () https://git.kernel.org/stable/c/775f3c1882a493168e08fdb8cde0865c8f3a8a29 - Patch
References () https://git.kernel.org/stable/c/9c82920359b7c1eddaf72069bcfe0ffddf088cd0 - () https://git.kernel.org/stable/c/9c82920359b7c1eddaf72069bcfe0ffddf088cd0 - Patch

21 Nov 2024, 09:03

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/24c890dd712f6345e382256cae8c97abb0406b70 - () https://git.kernel.org/stable/c/24c890dd712f6345e382256cae8c97abb0406b70 -
References () https://git.kernel.org/stable/c/775f3c1882a493168e08fdb8cde0865c8f3a8a29 - () https://git.kernel.org/stable/c/775f3c1882a493168e08fdb8cde0865c8f3a8a29 -
References () https://git.kernel.org/stable/c/9c82920359b7c1eddaf72069bcfe0ffddf088cd0 - () https://git.kernel.org/stable/c/9c82920359b7c1eddaf72069bcfe0ffddf088cd0 -

Information

Published : 2024-04-17 10:15

Updated : 2025-03-27 20:56


NVD link : CVE-2024-26824

Mitre link : CVE-2024-26824

CVE.ORG link : CVE-2024-26824


JSON object : View

Products Affected