fkie_nvd - fkie_cve-2024-58075

fkie_cve-2024-58075

Vulnerability from fkie_nvd

Published

2025-03-06 16:15

Modified

2025-03-06 16:15

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - do not transfer req when tegra init fails The tegra_cmac_init or tegra_sha_init function may return an error when memory is exhausted. It should not transfer the request when they return an error.

References

▶	URL	Tags
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/15589bda46830695a3261518bb7627afac61f519
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/1dbc270f9df7f0ae1e591323431869059cee1b7d
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/5eaa7c916e1ec4b122a1c3a8a20e692d9d9e174e

Impacted products

	Vendor	Product	Version

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: tegra - do not transfer req when tegra init fails\n\nThe tegra_cmac_init or tegra_sha_init function may return an error when\nmemory is exhausted. It should not transfer the request when they return\nan error."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: crypto: tegra - no transferir solicitud cuando falla la inicializaci\u00f3n de tegra La funci\u00f3n tegra_cmac_init o tegra_sha_init puede devolver un error cuando se agota la memoria. No deber\u00eda transferir la solicitud cuando devuelven un error."
    }
  ],
  "id": "CVE-2024-58075",
  "lastModified": "2025-03-06T16:15:54.040",
  "metrics": {},
  "published": "2025-03-06T16:15:54.040",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/15589bda46830695a3261518bb7627afac61f519"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/1dbc270f9df7f0ae1e591323431869059cee1b7d"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/5eaa7c916e1ec4b122a1c3a8a20e692d9d9e174e"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Awaiting Analysis"
}

CVE-2024-58075 (GCVE-0-2024-58075)

Vulnerability from cvelistv5

Published

2025-03-06 16:04

Modified

2025-05-04 10:09

Severity ?

Summary

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - do not transfer req when tegra init fails The tegra_cmac_init or tegra_sha_init function may return an error when memory is exhausted. It should not transfer the request when they return an error.

References

►

URL

Tags

	https://git.kernel.org/stable/c/1dbc270f9df7f0ae1e591323431869059cee1b7d
	https://git.kernel.org/stable/c/5eaa7c916e1ec4b122a1c3a8a20e692d9d9e174e
	https://git.kernel.org/stable/c/15589bda46830695a3261518bb7627afac61f519

Impacted products

Vendor

Product

Version

►

Version: 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0
Version: 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0
Version: 0880bb3b00c855fc244b7177ffdaafef4d0aa1e0

Version: 6.10

Show details on NVD website

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/crypto/tegra/tegra-se-aes.c",
            "drivers/crypto/tegra/tegra-se-hash.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "1dbc270f9df7f0ae1e591323431869059cee1b7d",
              "status": "affected",
              "version": "0880bb3b00c855fc244b7177ffdaafef4d0aa1e0",
              "versionType": "git"
            },
            {
              "lessThan": "5eaa7c916e1ec4b122a1c3a8a20e692d9d9e174e",
              "status": "affected",
              "version": "0880bb3b00c855fc244b7177ffdaafef4d0aa1e0",
              "versionType": "git"
            },
            {
              "lessThan": "15589bda46830695a3261518bb7627afac61f519",
              "status": "affected",
              "version": "0880bb3b00c855fc244b7177ffdaafef4d0aa1e0",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/crypto/tegra/tegra-se-aes.c",
            "drivers/crypto/tegra/tegra-se-hash.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.10"
            },
            {
              "lessThan": "6.10",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.13",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.13.*",
              "status": "unaffected",
              "version": "6.13.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.14",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.13",
                  "versionStartIncluding": "6.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.13.2",
                  "versionStartIncluding": "6.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.14",
                  "versionStartIncluding": "6.10",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: tegra - do not transfer req when tegra init fails\n\nThe tegra_cmac_init or tegra_sha_init function may return an error when\nmemory is exhausted. It should not transfer the request when they return\nan error."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-04T10:09:24.851Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/1dbc270f9df7f0ae1e591323431869059cee1b7d"
        },
        {
          "url": "https://git.kernel.org/stable/c/5eaa7c916e1ec4b122a1c3a8a20e692d9d9e174e"
        },
        {
          "url": "https://git.kernel.org/stable/c/15589bda46830695a3261518bb7627afac61f519"
        }
      ],
      "title": "crypto: tegra - do not transfer req when tegra init fails",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-58075",
    "datePublished": "2025-03-06T16:04:30.864Z",
    "dateReserved": "2025-03-06T15:52:09.182Z",
    "dateUpdated": "2025-05-04T10:09:24.851Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.