THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2024-26584 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTO_TFM_REQ_MAY_BACKLOG flag on our requests to the crypto API, crypto_aead_{encrypt,decrypt} can return -EBUSY instead of -EINPROGRES

[NVD] CVE-2024-26584 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTO_TFM_REQ_MAY_BACKLOG flag on our requests to the crypto API, crypto_aead_{encrypt,decrypt} can return -EBUSY instead of -EINPROGRES

lownvdPublished 2024-02-21

CVE-2024-26584 CVSS: 9.8 CRITICAL Published: 2024-02-21T15:15:09.420

In the Linux kernel, the following vulnerability has been resolved:

net: tls: handle backlogging of crypto requests

Since we're setting the CRYPTO_TFM_REQ_MAY_BACKLOG flag on our requests to the crypto API, crypto_aead_{encrypt,decrypt} can return -EBUSY instead of -EINPROGRESS in valid situations. For example, when the crypt

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-26584