CVE-2024-27061

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

crypto: sun8i-ce - Fix use after free in unprepare

sun8i_ce_cipher_unprepare should be called before

crypto_finalize_skcipher_request, because client callbacks may

immediately free memory, that isn't needed anymore. But it will be

used by unprepare after free. Before removing prepare/unprepare

callbacks it was handled by crypto engine in crypto_finalize_request.

Usually that results in a pointer dereference problem during a in

crypto selftest.

Unable to handle kernel NULL pointer dereference at

virtual address 0000000000000030

Mem abort info:

ESR = 0x0000000096000004

EC = 0x25: DABT (current EL), IL = 32 bits

SET = 0, FnV = 0

EA = 0, S1PTW = 0

FSC = 0x04: level 0 translation fault

Data abort info:

ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000

CM = 0, WnR = 0, TnD = 0, TagAccess = 0

GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0

user pgtable: 4k pages, 48-b

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References