CVE-2024-58075

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-58075
In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - do not transfer req when tegra init fails The tegra_cmac_init or tegra_sha_init function may return an error when memory is exhausted. It should not transfer the request when they return an error.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/15589bda46830695a3261518bb7627afac61f519 Patch
https://git.kernel.org/stable/c/1dbc270f9df7f0ae1e591323431869059cee1b7d Patch
https://git.kernel.org/stable/c/5eaa7c916e1ec4b122a1c3a8a20e692d9d9e174e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

31 Oct 2025, 16:33

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: crypto: tegra - no transferir solicitud cuando falla la inicialización de tegra La función tegra_cmac_init o tegra_sha_init puede devolver un error cuando se agota la memoria. No debería transferir la solicitud cuando devuelven un error.
References () https://git.kernel.org/stable/c/15589bda46830695a3261518bb7627afac61f519 - () https://git.kernel.org/stable/c/15589bda46830695a3261518bb7627afac61f519 - Patch
References () https://git.kernel.org/stable/c/1dbc270f9df7f0ae1e591323431869059cee1b7d - () https://git.kernel.org/stable/c/1dbc270f9df7f0ae1e591323431869059cee1b7d - Patch
References () https://git.kernel.org/stable/c/5eaa7c916e1ec4b122a1c3a8a20e692d9d9e174e - () https://git.kernel.org/stable/c/5eaa7c916e1ec4b122a1c3a8a20e692d9d9e174e - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

06 Mar 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-06 16:15

Updated : 2025-10-31 16:33

NVD link : CVE-2024-58075

Mitre link : CVE-2024-58075

CVE.ORG link : CVE-2024-58075

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo