net: tls: handle backlogging of crypto requests

Summary

CVE	CVE-2024-26584
State	PUBLISHED
Assigner	Linux
Source Priority	CVE Program / NVD first with legacy fallback
Published	2024-02-21 15:15:09 UTC
Updated	2026-08-04 11:16:44 UTC
Description	In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTO_TFM_REQ_MAY_BACKLOG flag on our requests to the crypto API, crypto_aead_{encrypt,decrypt} can return -EBUSY instead of -EINPROGRESS in valid situations. For example, when the cryptd queue for AESNI is full (easy to trigger with an artificially low cryptd.cryptd_max_cpu_qlen), requests will be enqueued to the backlog but still processed. In that case, the async callback will also be called twice: first with err == -EINPROGRESS, which it seems we can just ignore, then with err == 0. Compared to Sabrina's original patch this version uses the new tls_*crypt_async_wait() helpers and converts the EBUSY to EINPROGRESS to avoid having to modify all the error handling paths. The handling is identical.

Primary CVSS: v3.1 5.5 MEDIUM from [email protected]

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Problem Types: CWE-755

Version	Source	Type	Score	Severity	Vector
3.1	[email protected]	Primary	5.5	MEDIUM	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`
3.1	416baaa9-dc9f-4396-8d5f-8c081fb06d67	Secondary	9.8	CRITICAL	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
3.1	CNA	DECLARED	9.8	CRITICAL	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Linux	Linux Kernel	All	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Linux	Linux	affected a54667f6728c2714a400f3c884727da74b6d1717 3ade391adc584f17b5570fd205de3ad029090368 git	Not specified
CNA	Linux	Linux	affected a54667f6728c2714a400f3c884727da74b6d1717 cd1bbca03f3c1d845ce274c0d0a66de8e5929f72 git	Not specified
CNA	Linux	Linux	affected a54667f6728c2714a400f3c884727da74b6d1717 13eca403876bbea3716e82cdfe6f1e6febb38754 git	Not specified
CNA	Linux	Linux	affected a54667f6728c2714a400f3c884727da74b6d1717 ab6397f072e5097f267abf5cb08a8004e6b17694 git	Not specified
CNA	Linux	Linux	affected a54667f6728c2714a400f3c884727da74b6d1717 8590541473188741055d27b955db0777569438e3 git	Not specified
CNA	Linux	Linux	affected 4.16	Not specified
CNA	Linux	Linux	unaffected 4.16 semver	Not specified
CNA	Linux	Linux	unaffected 5.15.160 5.15.* semver	Not specified
CNA	Linux	Linux	unaffected 6.1.84 6.1.* semver	Not specified
CNA	Linux	Linux	unaffected 6.6.18 6.6.* semver	Not specified
CNA	Linux	Linux	unaffected 6.7.6 6.7.* semver	Not specified
CNA	Linux	Linux	unaffected 6.8 * original_commit_for_fix	Not specified

Reference	Source	Link	Tags
git.kernel.org/stable/c/3ade391adc584f17b5570fd205de3ad029090368	af854a3a-2127-422b-91ae-364da2661108	git.kernel.org
net: tls: handle backlogging of crypto requests - kernel/git/stable/linux.git - Linux kernel stable tree	af854a3a-2127-422b-91ae-364da2661108	git.kernel.org	Patch
net: tls: handle backlogging of crypto requests - kernel/git/stable/linux.git - Linux kernel stable tree	af854a3a-2127-422b-91ae-364da2661108	git.kernel.org	Patch
git.kernel.org/stable/c/ab6397f072e5097f267abf5cb08a8004e6b17694	af854a3a-2127-422b-91ae-364da2661108	git.kernel.org	Patch
lists.fedoraproject.org/archives/list/[email protected]/messag...	af854a3a-2127-422b-91ae-364da2661108	lists.fedoraproject.org
git.kernel.org/stable/c/cd1bbca03f3c1d845ce274c0d0a66de8e5929f72	af854a3a-2127-422b-91ae-364da2661108	git.kernel.org	Patch
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.