CVE-2024-58008

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been identified where DCP trusted keys can crash during encryption and decryption of the blob encryption key via the DCP crypto driver when vmalloc stack addresses are enabled. This is caused by improper use of sg init one() with vmalloc'd stack buffers, specifically plain key blob.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.