CVE-2024-56690

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2024-12-28 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY Since commit 8f4f68e788c3 ("crypto: pcrypt - Fix hungtask for PADATA_RESET"), the pcrypt encryption and decryption operations return -EAGAIN when the CPU goes online or offline. In alg_test(), a WARN is generated when pcrypt_aead_decrypt() or pcrypt_aead_encrypt() returns -EAGAIN, the unnecessary panic will occur when panic_on_warn set 1. Fix this issue by calling crypto layer directly without parallelization in that case.

Affected Software (21)

VendorProductVersion
Linux Linux 039fec48e062504f14845124a1a25eb199b2ddc0 < dd8bf8eb5beba1e7c3b11a9a5a58ccbf345a69e6
Linux Linux c9c1334697301c10e6918d747ed38abfbc0c96e7 < fca8aed12218f96b38e374ff264d78ea1fbd23cc
Linux Linux e97bf4ada7dddacd184c3e196bd063b0dc71b41d < a92ccd3618e42333ac6f150ecdac14dca298bc7a
Linux Linux 546c1796ad1ed0d87dab3c4b5156d75819be2316 < 96001f52ae8c70e2c736d3e1e5dc53d5b521e5ca
Linux Linux c55fc098fd9d2dca475b82d00ffbcaf97879d77e < 92834692a539b5b7f409e467a14667d64713b732
Linux Linux 372636debe852913529b1716f44addd94fff2d28 < 5edae7a9a35606017ee6e05911c290acee9fee5a
Linux Linux 8f4f68e788c3a7a696546291258bfa5fdb215523 < a8e0074ffb38c9a5964a221bb998034d016c93a2
Linux Linux 8f4f68e788c3a7a696546291258bfa5fdb215523 < 7ddab756f2de5b7b43c122ebebdf37f400fb2b6f
Linux Linux 8f4f68e788c3a7a696546291258bfa5fdb215523 < 662f2f13e66d3883b9238b0b96b17886179e60e2
Linux Linux fb2d3a50a8f29a3c66682bb426144f40e32ab818
Linux Linux e134f3aba98e6c801a693f540912c2d493718ddf
Linux Linux 4.19.300 < 4.19.325
Linux Linux 5.4.262 < 5.4.287
Linux Linux 5.10.202 < 5.10.231
Linux Linux 5.15.140 < 5.15.174
Linux Linux 6.1.64 < 6.1.120
Linux Linux 6.6.3 < 6.6.64
Linux Linux 4.14.331 < 4.15
Linux Linux 6.5.13 < 6.6
Linux Linux 6.7
linux linux_kernel 4.14.331 – 4.15

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.19%
Raw Score 0.001890
Percentile 8.6%
Date 2026-11-05

Intelligence Sources

mitre ref →
nvd ref →