CVE-2024-56690

In the Linux kernel, the following vulnerability has been resolved:

crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY

Since commit 8f4f68e788c3 ("crypto: pcrypt - Fix hungtask for PADATA_RESET"), the pcrypt encryption and decryption operations return -EAGAIN when the CPU goes online or offline. In alg_test(), a WARN is generated when pcrypt_aead_decrypt() or pcrypt_aead_encrypt() returns -EAGAIN, the unnecessary panic will occur when panic_on_warn set 1. Fix this issue by calling crypto layer directly without parallelization in that case.

This vulnerability is rated as Moderate severity because triggering the denial of service requires local interaction during CPU hotplug operations and primarily causes a system crash only when the non-default panic_on_warn setting is active. In standard Red Hat Enterprise Linux deployments, panic_on_warn is disabled by default, meaning that unexpected return codes from the parallel crypto engine trigger a kernel warning rather than an immediate kernel panic. Confidentiality and system integrity are not directly compromised by this condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.