CVE-2024-35926 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix async_disable descriptor leak The disable_async paths of iaa_compress/decompress() don't free idxd descriptors in the async_disable case. Currently this only happens in the testcases where req->dst is set to null. Add a test to free them in those paths.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/262534ddc88dfea7474ed18adfecf856e4fbe054
https://git.kernel.org/stable/c/d994f7d77aaded05dc05af58a2720fd4f4b72a83
https://lore.kernel.org/linux-cve-announce/2024051915-CVE-2024-35926-d677@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2024-35926
https://www.cve.org/CVERecord?id=CVE-2024-35926

History

No history.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-19T10:10:36.420Z

Updated: 2024-12-19T08:58:23.799Z

Reserved: 2024-05-17T13:50:33.127Z

Link: CVE-2024-35926

Vulnrichment

Updated: 2024-08-02T03:21:49.139Z

NVD

Status : Awaiting Analysis

Published: 2024-05-19T11:15:48.793

Modified: 2024-11-21T09:21:13.097

Link: CVE-2024-35926

Redhat

Severity : Low

Publid Date: 2024-05-19T00:00:00Z

Links: CVE-2024-35926 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-35926", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-17T13:50:33.127Z", "datePublished": "2024-05-19T10:10:36.420Z", "dateUpdated": "2024-12-19T08:58:23.799Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T08:58:23.799Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: iaa - Fix async_disable descriptor leak\n\nThe disable_async paths of iaa_compress/decompress() don't free idxd\ndescriptors in the async_disable case. Currently this only happens in\nthe testcases where req->dst is set to null. Add a test to free them\nin those paths."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/intel/iaa/iaa_crypto_main.c"], "versions": [{"version": "ea7a5cbb43696cfacf73e61916d1860ac30b5b2f", "lessThan": "d994f7d77aaded05dc05af58a2720fd4f4b72a83", "status": "affected", "versionType": "git"}, {"version": "ea7a5cbb43696cfacf73e61916d1860ac30b5b2f", "lessThan": "262534ddc88dfea7474ed18adfecf856e4fbe054", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/intel/iaa/iaa_crypto_main.c"], "versions": [{"version": "6.8", "status": "affected"}, {"version": "0", "lessThan": "6.8", "status": "unaffected", "versionType": "semver"}, {"version": "6.8.6", "lessThanOrEqual": "6.8.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.9", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/d994f7d77aaded05dc05af58a2720fd4f4b72a83"}, {"url": "https://git.kernel.org/stable/c/262534ddc88dfea7474ed18adfecf856e4fbe054"}], "title": "crypto: iaa - Fix async_disable descriptor leak", "x_generator": {"engine": "bippy-5f407fcff5a0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-35926", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-20T14:06:39.621529Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:33:27.611Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:21:49.139Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/d994f7d77aaded05dc05af58a2720fd4f4b72a83", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/262534ddc88dfea7474ed18adfecf856e4fbe054", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/d994f7d77aaded05dc05af58a2720fd4f4b72a83", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/262534ddc88dfea7474ed18adfecf856e4fbe054", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:21:49.139Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-35926", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-20T14:06:39.621529Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:24.754Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "crypto: iaa - Fix async_disable descriptor leak", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "ea7a5cbb43696cfacf73e61916d1860ac30b5b2f", "lessThan": "d994f7d77aaded05dc05af58a2720fd4f4b72a83", "versionType": "git"}, {"status": "affected", "version": "ea7a5cbb43696cfacf73e61916d1860ac30b5b2f", "lessThan": "262534ddc88dfea7474ed18adfecf856e4fbe054", "versionType": "git"}], "programFiles": ["drivers/crypto/intel/iaa/iaa_crypto_main.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.8"}, {"status": "unaffected", "version": "0", "lessThan": "6.8", "versionType": "semver"}, {"status": "unaffected", "version": "6.8.6", "versionType": "semver", "lessThanOrEqual": "6.8.*"}, {"status": "unaffected", "version": "6.9", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/crypto/intel/iaa/iaa_crypto_main.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/d994f7d77aaded05dc05af58a2720fd4f4b72a83"}, {"url": "https://git.kernel.org/stable/c/262534ddc88dfea7474ed18adfecf856e4fbe054"}], "x_generator": {"engine": "bippy-5f407fcff5a0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: iaa - Fix async_disable descriptor leak\n\nThe disable_async paths of iaa_compress/decompress() don't free idxd\ndescriptors in the async_disable case. Currently this only happens in\nthe testcases where req->dst is set to null. Add a test to free them\nin those paths."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-12-19T08:58:23.799Z"}}}, "cveMetadata": {"cveId": "CVE-2024-35926", "state": "PUBLISHED", "dateUpdated": "2024-12-19T08:58:23.799Z", "dateReserved": "2024-05-17T13:50:33.127Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-19T10:10:36.420Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}