Description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - Remove bogus SGL free on zero-length error path When a zero-length message is hashed by algif_hash, and an error is triggered, it tries to free an SG list that was never allocated in the first place. Fix this by not freeing the SG list on the zero-length error path.

INFO

Published Date :

2024-04-17T09:43:50.485Z

Last Modified :

2025-05-04T08:57:21.556Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2024-26824 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-26824.

URL Resource
https://git.kernel.org/stable/c/24c890dd712f6345e382256cae8c97abb0406b70 cve-icon cve-icon
https://git.kernel.org/stable/c/775f3c1882a493168e08fdb8cde0865c8f3a8a29 cve-icon cve-icon
https://git.kernel.org/stable/c/9c82920359b7c1eddaf72069bcfe0ffddf088cd0 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024041702-CVE-2024-26824-98e1@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-26824 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-26824 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact