Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2024-43815— crypto: mxs-dcp - Ensure payload is zero when using key slot

AI Predicted 7.5 Difficulty: Easy EPSS 0.21% · P12

Possible ATT&CK Techniques 1AI

T1407

Affected Version Matrix 6

VendorProductVersion RangeStatus
LinuxLinux3d16af0b4cfac4b2c3b238e2ec37b38c2f316978< e1640fed0377bf7276efb70d03cb821a6931063daffected
3d16af0b4cfac4b2c3b238e2ec37b38c2f316978< dd52b5eeb0f70893f762da7254e923fd23fd1379affected
6.10affected
< 6.10unaffected
6.10.3≤ 6.10.*unaffected
6.11≤ *unaffected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-43815

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
crypto: mxs-dcp - Ensure payload is zero when using key slot
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: crypto: mxs-dcp - Ensure payload is zero when using key slot We could leak stack memory through the payload field when running AES with a key from one of the hardware's key slots. Fix this by ensuring the payload field is set to 0 in such cases. This does not affect the common use case when the key is supplied from main memory via the descriptor payload.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于mxs-dcp组件在使用硬件密钥时，未能确保payload字段为零，导致栈内存泄漏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 3d16af0b4cfac4b2c3b238e2ec37b38c2f316978 ~ e1640fed0377bf7276efb70d03cb821a6931063d -
LinuxLinux 6.10 -

II. Public POCs for CVE-2024-43815

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-43815

请登录查看更多情报信息。

Other References for CVE-2024-43815 (2)

Same Patch Batch · Linux · 2024-08-17 · 109 CVEs total

CVE-2024-422859.8 CRITICALRDMA/iwcm: Fix a use-after-free related to destroying CM IDs
CVE-2024-422849.1 CRITICALtipc: Return non-zero value from tipc_udp_addr2str() on error
CVE-2024-423188.8 HIGHlandlock: Don't lose track of restrictions on cred_transfer
CVE-2024-438488.8 HIGHwifi: mac80211: fix TTLM teardown work
CVE-2024-438478.8 HIGHwifi: ath12k: fix invalid memory access while processing fragmented packets
CVE-2024-422878.8 HIGHscsi: qla2xxx: Complete command early within lock
CVE-2024-422967.8 HIGHf2fs: fix return value of f2fs_convert_inline_inode()
CVE-2024-422997.8 HIGHfs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
CVE-2024-422807.8 HIGHmISDN: Fix a use after free in hfcmulti_tx()
CVE-2024-423147.8 HIGHbtrfs: fix extent map use-after-free when adding pages to compressed bio
CVE-2024-438467.8 HIGHlib: objagg: Fix general protection fault
CVE-2024-422977.8 HIGHf2fs: fix to don't dirty inode for readonly filesystem
CVE-2024-438407.8 HIGHbpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
CVE-2024-422797.8 HIGHspi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer
CVE-2024-422937.8 HIGHarm64: mm: Fix lockless walks with static and dynamic page-table folding
CVE-2024-438307.8 HIGHleds: trigger: Unregister sysfs attributes before calling deactivate()
CVE-2024-423007.8 HIGHerofs: fix race in z_erofs_get_gbuf()
CVE-2024-438327.8 HIGHs390/uv: Don't call folio_wait_writeback() without a folio reference
CVE-2024-438457.8 HIGHudf: Fix bogus checksum computation in udf_rename()
CVE-2024-422887.8 HIGHscsi: qla2xxx: Fix for possible memory corruption

Showing top 20 of 109 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2024-43815

No comments yet

Leave a comment