https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:44:53 +0000 https://vulnerability.circl.lu/vuln/cve-2024-58008 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y</p> <p>With vmalloc stack addresses enabled (CONFIG_VMAP_STACK=y) DCP trusted keys can crash during en- and decryption of the blob encryption key via the DCP crypto driver. This is caused by improperly using sg_init_one() with vmalloc&#39;d stack buffers (plain_key_blob).</p> <p>Fix this by always using kmalloc() for buffers we give to the DCP crypto driver.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y</p> <p>With vmalloc stack addresses enabled (CONFIG_VMAP_STACK=y) DCP trusted keys can crash during en- and decryption of the blob encryption key via the DCP crypto driver. This is caused by improperly using sg_init_one() with vmalloc&#39;d stack buffers (plain_key_blob).</p> <p>Fix this by always using kmalloc() for buffers we give to the DCP crypto driver.</p> https://vulnerability.circl.lu/vuln/cve-2024-58008