CVE-2024-56681

Summary

In the Linux kernel, the following vulnerability has been resolved:

crypto: bcm - add error check in the ahash_hmac_init function

The ahash_init functions may return fails. The ahash_hmac_init should not return ok when ahash_init returns error. For an example, ahash_init will return -ENOMEM when allocation memory is error.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < 8f1a9a960b1107bd0e0ec3736055f5ed0e717edfaffected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < 75e1e38e5d80d6d9011b7322698ffba3dd3db30aaffected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < 28f8ffa945f7d7150463e15097ea73b19529d6f5affected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < 4ea3e3b761e371102bb1486778e2f8dbc9e37413affected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < 05f0a3f5477ecaa1cf46448504afe9e7c2e96fccaffected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < ae5253313e0ea5f00c06176074592b7f493c8546affected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < ee36db8e8203420e6d5c42eb9428920c2fc36532affected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < bba9e38c5ad41d0a88b22a59e5b6dd3e31825118affected
LinuxLinux9d12ba86f818aa9cfe9f01b750336aa441f2ffa2 < 19630cf57233e845b6ac57c9c969a4888925467baffected
LinuxLinux4.11affected
LinuxLinux0 < 4.11unaffected
LinuxLinux4.19.325 <= 4.19.*unaffected
LinuxLinux5.4.287 <= 5.4.*unaffected
LinuxLinux5.10.231 <= 5.10.*unaffected
LinuxLinux5.15.174 <= 5.15.*unaffected
LinuxLinux6.1.120 <= 6.1.*unaffected
LinuxLinux6.6.64 <= 6.6.*unaffected
LinuxLinux6.11.11 <= 6.11.*unaffected
LinuxLinux6.12.2 <= 6.12.*unaffected
LinuxLinux6.13 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

References