Bugzilla – Bug 1224713
VUL-0: CVE-2024-35792: kernel: crypto: rk3288 - Fix use after free in unprepare
Last modified: 2024-06-12 12:00:56 UTC
In the Linux kernel, the following vulnerability has been resolved: crypto: rk3288 - Fix use after free in unprepare The unprepare call must be carried out before the finalize call as the latter can free the request. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-35792 https://www.cve.org/CVERecord?id=CVE-2024-35792 https://git.kernel.org/stable/c/48dd260fdb728eda4a246f635d1325e82f0d3555 https://git.kernel.org/stable/c/c0afb6b88fbbc177fa322a835f874be217bffe45 https://git.kernel.org/stable/c/eb2a41a8ae8c8c4f68aef3bd94665c0cf23e04be https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-35792.mbox https://bugzilla.redhat.com/show_bug.cgi?id=2281050
https://www.suse.com/security/cve/CVE-2024-35792.html cvss 5.5
joeyli@linux-691t:/mnt/working/source_code-git/kernel-source> ./scripts/check-kernel-fix CVE-2024-35792 c0afb6b88fbb ("crypto: rk3288 - Fix use after free in unprepare") merged v6.8~22^2 Fixes: c66c17a0f69b ("crypto: rk3288 - Remove prepare/unprepare request") merged v6.6-rc1~163^2~33 Security fix for CVE-2024-35792 bsc#1224713 with CVSS 5.5 Experts candidates: oneukum@suse.de duwe@suse.de .............................. NO ACTION NEEDED: All relevant branches contain the fix! Does not affect any branch. reset assignee
All done, closing.