CVE-2024-47658

In the Linux kernel, the following vulnerability has been resolved:

crypto: stm32/cryp - call finalize with bh disabled

The finalize operation in interrupt mode produce a produces a spinlock recursion warning. The reason is the fact that BH must be disabled during this process.

A LOW impact flaw was found in the Linux kernel STM32 CRYP cryptographic driver. When the driver's finalize operation runs in interrupt mode, bottom halves (BH) are not disabled, which triggers a spinlock recursion warning. This is a local availability issue only; confidentiality and integrity are not affected (Red Hat CVSS 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). The CVE.org record scores this issue higher (7.5 with a network attack vector); Red Hat's assessment differs because the flaw resides in the hardware-specific STM32 CRYP driver (drivers/crypto/stm32/stm32-cryp.c), where the affected code path is reached through local use of the STM32 cryptographic hardware and the consequence is a kernel locking warning rather than remote compromise. Within Red Hat's product portfolio, only Fedora (community kernel) is affected, and a fix is being pursued through the community kernel (DELEGATED resolution). All Red Hat Enterprise Linux 6 through 9 kernel and kernel-rt streams, as well as the Hosted OpenShift Clusters offerings (ARO and OSD), have been assessed as not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.