Threats tagged 'ghsa-4w8p-fpvp-22x8'

CVE-2024-56690 is a vulnerability in the Linux kernel's crypto subsystem affecting the pcrypt encryption and decryption operations. The issue arises when padata_do_parallel() returns -EBUSY, causing the operations to return -EAGAIN during CPU online or offline events. This leads to a WARN in alg_test() and can trigger an unnecessary kernel panic if panic_on_warn is set to 1. The fix involves calling the crypto layer directly without parallelization in these cases to prevent the panic.