CVE-2024-56681

crypto: bcm - add error check in the ahash_hmac_init function

State: Published
Severity: 7.8 High
Published: Dec 28, 2024
Updated: Oct 15, 2026
Reserved: Dec 27, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: bcm - add error check in the ahash_hmac_init function

The ahash_init functions may return fails. The ahash_hmac_init should not return ok when ahash_init returns error. For an example, ahash_init will return -ENOMEM when allocation memory is error.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 8f1a9a960b1107bd0e0ec3736055f5ed0e717edfAffected 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 75e1e38e5d80d6d9011b7322698ffba3dd3db30aAffected 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 28f8ffa945f7d7150463e15097ea73b19529d6f5Affected 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 4ea3e3b761e371102bb1486778e2f8dbc9e37413Affected 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 05f0a3f5477ecaa1cf46448504afe9e7c2e96fccAffected 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before ae5253313e0ea5f00c06176074592b7f493c8546Affected 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before ee36db8e8203420e6d5c42eb9428920c2fc36532Affected 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before bba9e38c5ad41d0a88b22a59e5b6dd3e31825118Affected 9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 19630cf57233e845b6ac57c9c969a4888925467bAffected
LinuxLinux	4.11Affected before 4.11Not affected 4.19.325 through 4.19.Not affected 5.4.287 through 5.4.Not affected 5.10.231 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.120 through 6.1.Not affected 6.6.64 through 6.6.Not affected 6.11.11 through 6.11.Not affected 6.12.2 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 8f1a9a960b1107bd0e0ec3736055f5ed0e717edfAffected
9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 75e1e38e5d80d6d9011b7322698ffba3dd3db30aAffected
9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 28f8ffa945f7d7150463e15097ea73b19529d6f5Affected
9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 4ea3e3b761e371102bb1486778e2f8dbc9e37413Affected
9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 05f0a3f5477ecaa1cf46448504afe9e7c2e96fccAffected
9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before ae5253313e0ea5f00c06176074592b7f493c8546Affected
9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before ee36db8e8203420e6d5c42eb9428920c2fc36532Affected
9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before bba9e38c5ad41d0a88b22a59e5b6dd3e31825118Affected
9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 to before 19630cf57233e845b6ac57c9c969a4888925467bAffected

LinuxLinux

4.11Affected
before 4.11Not affected
4.19.325 through 4.19.*Not affected
5.4.287 through 5.4.*Not affected
5.10.231 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.120 through 6.1.*Not affected
6.6.64 through 6.6.*Not affected
6.11.11 through 6.11.*Not affected
6.12.2 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.