Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2024-26753

Summary
Assigner-Linux
Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At-03 Apr, 2024 | 17:00
Updated At-04 May, 2025 | 08:55
Rejected At-
Credits

crypto: virtio/akcipher - Fix stack overflow on memcpy

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio/akcipher - Fix stack overflow on memcpy sizeof(struct virtio_crypto_akcipher_session_para) is less than sizeof(struct virtio_crypto_op_ctrl_req::u), copying more bytes from stack variable leads stack overflow. Clang reports this issue by commands: make -j CC=clang-14 mrproper >/dev/null 2>&1 make -j O=/tmp/crypto-build CC=clang-14 allmodconfig >/dev/null 2>&1 make -j O=/tmp/crypto-build W=1 CC=clang-14 drivers/crypto/virtio/ virtio_crypto_akcipher_algs.o

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:Linux
Assigner Org ID:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:03 Apr, 2024 | 17:00
Updated At:04 May, 2025 | 08:55
Rejected At:
▼CVE Numbering Authority (CNA)
crypto: virtio/akcipher - Fix stack overflow on memcpy

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio/akcipher - Fix stack overflow on memcpy sizeof(struct virtio_crypto_akcipher_session_para) is less than sizeof(struct virtio_crypto_op_ctrl_req::u), copying more bytes from stack variable leads stack overflow. Clang reports this issue by commands: make -j CC=clang-14 mrproper >/dev/null 2>&1 make -j O=/tmp/crypto-build CC=clang-14 allmodconfig >/dev/null 2>&1 make -j O=/tmp/crypto-build W=1 CC=clang-14 drivers/crypto/virtio/ virtio_crypto_akcipher_algs.o

Affected Products
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • drivers/crypto/virtio/virtio_crypto_akcipher_algs.c
Default Status
unaffected
Versions
Affected
  • From 1ff57428894fc4f5001d3df0762c1820295d6c4f before 37077ed16c7793e21b005979d33f8a61565b7e86 (git)
  • From 59ca6c93387d325e96577d8bd4c23c78c1491c11 before 62f361bfea60c6afc3df09c1ad4152e6507f6f47 (git)
  • From 59ca6c93387d325e96577d8bd4c23c78c1491c11 before b0365460e945e1117b47cf7329d86de752daff63 (git)
  • From 59ca6c93387d325e96577d8bd4c23c78c1491c11 before ef1e47d50324e232d2da484fe55a54274eeb9bc1 (git)
  • From 59ca6c93387d325e96577d8bd4c23c78c1491c11 before c0ec2a712daf133d9996a8a1b7ee2d4996080363 (git)
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • drivers/crypto/virtio/virtio_crypto_akcipher_algs.c
Default Status
affected
Versions
Affected
  • 5.18
Unaffected
  • From 0 before 5.18 (semver)
  • From 5.10.212 through 5.10.* (semver)
  • From 6.1.80 through 6.1.* (semver)
  • From 6.6.19 through 6.6.* (semver)
  • From 6.7.7 through 6.7.* (semver)
  • From 6.8 through * (original_commit_for_fix)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://git.kernel.org/stable/c/37077ed16c7793e21b005979d33f8a61565b7e86
N/A
https://git.kernel.org/stable/c/62f361bfea60c6afc3df09c1ad4152e6507f6f47
N/A
https://git.kernel.org/stable/c/b0365460e945e1117b47cf7329d86de752daff63
N/A
https://git.kernel.org/stable/c/ef1e47d50324e232d2da484fe55a54274eeb9bc1
N/A
https://git.kernel.org/stable/c/c0ec2a712daf133d9996a8a1b7ee2d4996080363
N/A
Hyperlink: https://git.kernel.org/stable/c/37077ed16c7793e21b005979d33f8a61565b7e86
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/62f361bfea60c6afc3df09c1ad4152e6507f6f47
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/b0365460e945e1117b47cf7329d86de752daff63
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/ef1e47d50324e232d2da484fe55a54274eeb9bc1
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/c0ec2a712daf133d9996a8a1b7ee2d4996080363
Resource: N/A
▼Authorized Data Publishers (ADP)
1. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://git.kernel.org/stable/c/37077ed16c7793e21b005979d33f8a61565b7e86
x_transferred
https://git.kernel.org/stable/c/62f361bfea60c6afc3df09c1ad4152e6507f6f47
x_transferred
https://git.kernel.org/stable/c/b0365460e945e1117b47cf7329d86de752daff63
x_transferred
https://git.kernel.org/stable/c/ef1e47d50324e232d2da484fe55a54274eeb9bc1
x_transferred
https://git.kernel.org/stable/c/c0ec2a712daf133d9996a8a1b7ee2d4996080363
x_transferred
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
x_transferred
Hyperlink: https://git.kernel.org/stable/c/37077ed16c7793e21b005979d33f8a61565b7e86
Resource:
x_transferred
Hyperlink: https://git.kernel.org/stable/c/62f361bfea60c6afc3df09c1ad4152e6507f6f47
Resource:
x_transferred
Hyperlink: https://git.kernel.org/stable/c/b0365460e945e1117b47cf7329d86de752daff63
Resource:
x_transferred
Hyperlink: https://git.kernel.org/stable/c/ef1e47d50324e232d2da484fe55a54274eeb9bc1
Resource:
x_transferred
Hyperlink: https://git.kernel.org/stable/c/c0ec2a712daf133d9996a8a1b7ee2d4996080363
Resource:
x_transferred
Hyperlink: https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
Resource:
x_transferred
2. CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published At:03 Apr, 2024 | 17:15
Updated At:27 Feb, 2025 | 21:59

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio/akcipher - Fix stack overflow on memcpy sizeof(struct virtio_crypto_akcipher_session_para) is less than sizeof(struct virtio_crypto_op_ctrl_req::u), copying more bytes from stack variable leads stack overflow. Clang reports this issue by commands: make -j CC=clang-14 mrproper >/dev/null 2>&1 make -j O=/tmp/crypto-build CC=clang-14 allmodconfig >/dev/null 2>&1 make -j O=/tmp/crypto-build W=1 CC=clang-14 drivers/crypto/virtio/ virtio_crypto_akcipher_algs.o

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.17.8HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Type: Primary
Version: 3.1
Base score: 7.8
Base severity: HIGH
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CPE Matches

Linux Kernel Organization, Inc
linux
>>linux_kernel>>Versions from 5.10.209(inclusive) to 5.10.212(exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>Versions from 5.18(inclusive) to 6.1.80(exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>Versions from 6.2(inclusive) to 6.6.19(exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>Versions from 6.7(inclusive) to 6.7.7(exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>6.8
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>6.8
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>6.8
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>6.8
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
Linux Kernel Organization, Inc
linux
>>linux_kernel>>6.8
cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*
Debian GNU/Linux
debian
>>debian_linux>>10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-787Secondarynvd@nist.gov
CWE ID: CWE-787
Type: Secondary
Source: nvd@nist.gov
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://git.kernel.org/stable/c/37077ed16c7793e21b005979d33f8a61565b7e86416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
https://git.kernel.org/stable/c/62f361bfea60c6afc3df09c1ad4152e6507f6f47416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
https://git.kernel.org/stable/c/b0365460e945e1117b47cf7329d86de752daff63416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
https://git.kernel.org/stable/c/c0ec2a712daf133d9996a8a1b7ee2d4996080363416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
https://git.kernel.org/stable/c/ef1e47d50324e232d2da484fe55a54274eeb9bc1416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
https://git.kernel.org/stable/c/37077ed16c7793e21b005979d33f8a61565b7e86af854a3a-2127-422b-91ae-364da2661108
Patch
https://git.kernel.org/stable/c/62f361bfea60c6afc3df09c1ad4152e6507f6f47af854a3a-2127-422b-91ae-364da2661108
Patch
https://git.kernel.org/stable/c/b0365460e945e1117b47cf7329d86de752daff63af854a3a-2127-422b-91ae-364da2661108
Patch
https://git.kernel.org/stable/c/c0ec2a712daf133d9996a8a1b7ee2d4996080363af854a3a-2127-422b-91ae-364da2661108
Patch
https://git.kernel.org/stable/c/ef1e47d50324e232d2da484fe55a54274eeb9bc1af854a3a-2127-422b-91ae-364da2661108
Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlaf854a3a-2127-422b-91ae-364da2661108
Mailing List
Hyperlink: https://git.kernel.org/stable/c/37077ed16c7793e21b005979d33f8a61565b7e86
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/62f361bfea60c6afc3df09c1ad4152e6507f6f47
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/b0365460e945e1117b47cf7329d86de752daff63
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/c0ec2a712daf133d9996a8a1b7ee2d4996080363
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/ef1e47d50324e232d2da484fe55a54274eeb9bc1
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/37077ed16c7793e21b005979d33f8a61565b7e86
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/62f361bfea60c6afc3df09c1ad4152e6507f6f47
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/b0365460e945e1117b47cf7329d86de752daff63
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/c0ec2a712daf133d9996a8a1b7ee2d4996080363
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://git.kernel.org/stable/c/ef1e47d50324e232d2da484fe55a54274eeb9bc1
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Mailing List

Change History

0
Information is not available yet

Similar CVEs

3723Records found

Details not found