CVE-2024-26753: crypto: virtio/akcipher - Fix stack overflow on memcpy

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-04-03 · updated 2026-06-17
Weakness: CWE-787

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio/akcipher - Fix stack overflow on memcpy sizeof(struct virtio_crypto_akcipher_session_para) is less than sizeof(struct virtio_crypto_op_ctrl_req::u), copying more bytes from stack variable leads stack overflow. Clang reports this issue by commands: make -j CC=clang-14 mrproper >/dev/null 2>&1 make -j O=/tmp/crypto-build CC=clang-14 allmodconfig >/dev/null 2>&1 make -j O=/tmp/crypto-build W=1 CC=clang-14 drivers/crypto/virtio/ virtio_crypto_akcipher_algs.o

Affected products

Debian Linux: 10.0
Linux kernel: from 5.10.209 before 5.10.212; from 5.18 before 6.1.80; from 6.2 before 6.6.19; from 6.7 before 6.7.7; 6.8-rc1, 6.8-rc2, 6.8-rc3, 6.8-rc4, 6.8-rc5 — fixed in 5.10.212, 6.1.80, 6.6.19, 6.7.7

How to fix

Upgrade to a fixed version: Linux kernel 5.10.212, 6.1.80, 6.6.19, 6.7.7. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2024-26753 or the next vulnerability affects your stack