Riskcovery

CVE-2024-26753

crypto: virtio/akcipher - Fix stack overflow on memcpy

State
Published
Severity
Not scored
Published
Apr 3, 2024
Updated
May 23, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: virtio/akcipher - Fix stack overflow on memcpy

sizeof(struct virtio_crypto_akcipher_session_para) is less than sizeof(struct virtio_crypto_op_ctrl_req::u), copying more bytes from stack variable leads stack overflow. Clang reports this issue by commands: make -j CC=clang-14 mrproper >/dev/null 2>&1 make -j O=/tmp/crypto-build CC=clang-14 allmodconfig >/dev/null 2>&1 make -j O=/tmp/crypto-build W=1 CC=clang-14 drivers/crypto/virtio/ virtio_crypto_akcipher_algs.o

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1ff57428894fc4f5001d3df0762c1820295d6c4f to before 37077ed16c7793e21b005979d33f8a61565b7e86Affected
  • 59ca6c93387d325e96577d8bd4c23c78c1491c11 to before 62f361bfea60c6afc3df09c1ad4152e6507f6f47Affected
  • 59ca6c93387d325e96577d8bd4c23c78c1491c11 to before b0365460e945e1117b47cf7329d86de752daff63Affected
  • 59ca6c93387d325e96577d8bd4c23c78c1491c11 to before ef1e47d50324e232d2da484fe55a54274eeb9bc1Affected
  • 59ca6c93387d325e96577d8bd4c23c78c1491c11 to before c0ec2a712daf133d9996a8a1b7ee2d4996080363Affected
  • 5.10.209 to before 5.10.212Affected
LinuxLinux
  • 5.18Affected
  • before 5.18Not affected
  • 5.10.212 through 5.10.*Not affected
  • 6.1.80 through 6.1.*Not affected
  • 6.6.19 through 6.6.*Not affected
  • 6.7.7 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.