CVE-2024-58008

In the Linux kernel, the following vulnerability has been resolved:

KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y

With vmalloc stack addresses enabled (CONFIG_VMAP_STACK=y) DCP trusted keys can crash during en- and decryption of the blob encryption key via the DCP crypto driver. This is caused by improperly using sg_init_one() with vmalloc'd stack buffers (plain_key_blob).

Fix this by always using kmalloc() for buffers we give to the DCP crypto driver.

Red Hat Enterprise Linux is not vulnerable to this flaw as the affected Data Co-Processor (DCP) trusted key implementation was introduced in newer upstream kernels and is not included or enabled in supported releases. The issue presents a local denial-of-service risk, requiring access to specialized embedded hardware platforms utilizing DCP cryptographic acceleration. As enterprise server environments do not use this architecture-specific functionality, typical deployments remain unaffected.