In the Linux kernel, the following vulnerability has been resolved:
KEYS: trusted: dcp: fix improper sg use with CONFIGVMAPSTACK=y
With vmalloc stack addresses enabled (CONFIGVMAPSTACK=y) DCP trusted keys can crash during en- and decryption of the blob encryption key via the DCP crypto driver. This is caused by improperly using sginitone() with vmalloc'd stack buffers (plainkeyblob).
Fix this by always using kmalloc() for buffers we give to the DCP crypto driver.
[
{
"target": {
"file": "security/keys/trusted-keys/trusted_dcp.c"
},
"id": "CVE-2024-58008-2751fb42",
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3355594de46fb1cba663f12b9644b664b8a609f4",
"digest": {
"line_hashes": [
"139673527400419373341108788056414452064",
"297751753045421822464772400881667479544",
"239120237977784852183774593950916654106",
"229247385759125522263307887701990619983",
"315254191716504627051822485132186656524",
"185748517508429170779796657454862462865",
"59612185636150012976876424684654633406",
"165971089284421547469244294312691321129",
"97015326081259419239372384751386362743",
"196264417994570651284027254899692842939",
"320035105073550672725369392657883310521",
"139673527400419373341108788056414452064",
"131707243036081951021706554801985773705",
"140243341798492369844821726928804801485",
"5206887103140305122666220638345357842",
"46170820156722608090646352261086249909",
"15475880858112402229628148834162995032",
"206275590043065694971795216499726702329",
"320613263872732463563461458428911799083",
"97015326081259419239372384751386362743",
"196264417994570651284027254899692842939",
"66045887068586104615624831924186299701"
],
"threshold": 0.9
}
},
{
"target": {
"function": "trusted_dcp_unseal",
"file": "security/keys/trusted-keys/trusted_dcp.c"
},
"id": "CVE-2024-58008-50518de2",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8d9fab39d1f87b52932646b2f1e7877aa3fc0f4",
"digest": {
"function_hash": "236669224187866451380815143615693958968",
"length": 956.0
}
},
{
"target": {
"function": "trusted_dcp_unseal",
"file": "security/keys/trusted-keys/trusted_dcp.c"
},
"id": "CVE-2024-58008-5155609a",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3192f1c54dddb9b5820bf5e8677809949d8e9c66",
"digest": {
"function_hash": "236669224187866451380815143615693958968",
"length": 956.0
}
},
{
"target": {
"function": "trusted_dcp_seal",
"file": "security/keys/trusted-keys/trusted_dcp.c"
},
"id": "CVE-2024-58008-706d7dc0",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3192f1c54dddb9b5820bf5e8677809949d8e9c66",
"digest": {
"function_hash": "20803493036906850902206083376039943014",
"length": 811.0
}
},
{
"target": {
"function": "trusted_dcp_seal",
"file": "security/keys/trusted-keys/trusted_dcp.c"
},
"id": "CVE-2024-58008-a9aeabae",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8d9fab39d1f87b52932646b2f1e7877aa3fc0f4",
"digest": {
"function_hash": "20803493036906850902206083376039943014",
"length": 811.0
}
},
{
"target": {
"function": "trusted_dcp_unseal",
"file": "security/keys/trusted-keys/trusted_dcp.c"
},
"id": "CVE-2024-58008-befd1a11",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3355594de46fb1cba663f12b9644b664b8a609f4",
"digest": {
"function_hash": "236669224187866451380815143615693958968",
"length": 956.0
}
},
{
"target": {
"file": "security/keys/trusted-keys/trusted_dcp.c"
},
"id": "CVE-2024-58008-c525ed16",
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3192f1c54dddb9b5820bf5e8677809949d8e9c66",
"digest": {
"line_hashes": [
"139673527400419373341108788056414452064",
"297751753045421822464772400881667479544",
"239120237977784852183774593950916654106",
"229247385759125522263307887701990619983",
"315254191716504627051822485132186656524",
"185748517508429170779796657454862462865",
"59612185636150012976876424684654633406",
"165971089284421547469244294312691321129",
"97015326081259419239372384751386362743",
"196264417994570651284027254899692842939",
"320035105073550672725369392657883310521",
"139673527400419373341108788056414452064",
"131707243036081951021706554801985773705",
"140243341798492369844821726928804801485",
"5206887103140305122666220638345357842",
"46170820156722608090646352261086249909",
"15475880858112402229628148834162995032",
"206275590043065694971795216499726702329",
"320613263872732463563461458428911799083",
"97015326081259419239372384751386362743",
"196264417994570651284027254899692842939",
"66045887068586104615624831924186299701"
],
"threshold": 0.9
}
},
{
"target": {
"function": "trusted_dcp_seal",
"file": "security/keys/trusted-keys/trusted_dcp.c"
},
"id": "CVE-2024-58008-dd890daf",
"signature_type": "Function",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3355594de46fb1cba663f12b9644b664b8a609f4",
"digest": {
"function_hash": "20803493036906850902206083376039943014",
"length": 811.0
}
},
{
"target": {
"file": "security/keys/trusted-keys/trusted_dcp.c"
},
"id": "CVE-2024-58008-ea699796",
"signature_type": "Line",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8d9fab39d1f87b52932646b2f1e7877aa3fc0f4",
"digest": {
"line_hashes": [
"139673527400419373341108788056414452064",
"297751753045421822464772400881667479544",
"239120237977784852183774593950916654106",
"229247385759125522263307887701990619983",
"315254191716504627051822485132186656524",
"185748517508429170779796657454862462865",
"59612185636150012976876424684654633406",
"165971089284421547469244294312691321129",
"97015326081259419239372384751386362743",
"196264417994570651284027254899692842939",
"320035105073550672725369392657883310521",
"139673527400419373341108788056414452064",
"131707243036081951021706554801985773705",
"140243341798492369844821726928804801485",
"5206887103140305122666220638345357842",
"46170820156722608090646352261086249909",
"15475880858112402229628148834162995032",
"206275590043065694971795216499726702329",
"320613263872732463563461458428911799083",
"97015326081259419239372384751386362743",
"196264417994570651284027254899692842939",
"66045887068586104615624831924186299701"
],
"threshold": 0.9
}
}
]