Security tracker / CVE-2024-26718

CVE-2024-26718

dm-crypt, dm-verity: disable tasklets

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 39d42fa96ba1b ("dm crypt: add flags to optionally bypass kcryptd
 carnil> workqueues")
 carnil> 5721d4e5a9cdb ("dm verity: Add optional "try_verify_in_tasklet" feature").
 carnil> Vulnerable versions: 5.9-rc1.

Bugs

Status

Branch	Status
upstream	released (6.8-rc3) [0a9bab391e336489169b95cb0d4553d921302189]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	N/A "Fixed before branching point"
6.7-upstream-stable	released (6.7.6) [0c45a20cbe68bc4d681734f5c03891124a274257]
6.6-upstream-stable	released (6.6.18) [5735a2671ffb70ea29ca83969fe01316ee2ed6fc]
6.1-upstream-stable	released (6.1.79) [30884a44e0cedc3dfda8c22432f3ba4078ec2d94]
5.10-upstream-stable	needed
4.19-upstream-stable	N/A "Vulnerable code not present"
sid	released (6.7.7-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.82-1)
5.10-bullseye-security	needed