5.5

CVE-2024-56690: linux

CVSS: 5.5v3.1MediumModified
AliasesRHSA-2025:21563UBUNTU-CVE-2024-56690DEBIAN-CVE-2024-56690
Published 28-12-2024Last modified 23-05-2026
Open JSON

Vulnerability summary

CVE-2024-56690 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 7.9% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.19%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 46 · Related 43
DLA-4075-1DLA-4076-1RHSA-2025:20095RHSA-2025:20518RHSA-2025:21492SUSE-SU-2025:0289-1

Timeline

  1. 28-12-2024
    PublishedVulnerability first disclosed.
  2. 23-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY Since commit 8f4f68e788c3 ("crypto: pcrypt - Fix hungtask for PADATA_RESET"), the pcrypt encryption and decryption operations return -EAGAIN when the CPU goes online or offline. In alg_test(), a WARN is generated when pcrypt_aead_decrypt() or pcrypt_aead_encrypt() returns -EAGAIN, the unnecessary panic will occur when panic_on_warn set 1. Fix this issue by calling crypto layer directly without parallelization in that case.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.19%

Chance of exploitation in the next 30 days

Percentile

8%

Versus all other CVEs

30-day change

0.00 pp

From 0.19% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.19%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu130 products
  • linux< 5.4.0-211.231 | < 5.15.0-135.146 | < 6.8.0-58.60
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.4.0-1142.152 | < 5.15.0-1080.87 | < 6.8.0-1027.29
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Redhat67 products
  • kernel< 0:5.14.0-570.64.1.el9_6
  • kernel-64k< 0:5.14.0-570.64.1.el9_6
  • kernel-64k-core< 0:5.14.0-570.64.1.el9_6
  • kernel-64k-debug< 0:5.14.0-570.64.1.el9_6
  • kernel-64k-debug-core< 0:5.14.0-570.64.1.el9_6
Linux2 products
  • linux≥ 039fec48e062504f14845124a1a25eb199b2ddc0, < dd8bf8eb5beba1e7c3b11a9a5a58ccbf345a69e6 | ≥ c9c1334697301c10e6918d747ed38abfbc0c96e7, < fca8aed12218f96b38e374ff264d78ea1fbd23cc | ≥ e97bf4ada7dddacd184c3e196bd063b0dc71b41d, < a92ccd3618e42333ac6f150ecdac14dca298bc7a | ≥ 546c1796ad1ed0d87dab3c4b5156d75819be2316, < 96001f52ae8c70e2c736d3e1e5dc53d5b521e5ca | ≥ c55fc098fd9d2dca475b82d00ffbcaf97879d77e, < 92834692a539b5b7f409e467a14667d64713b732 | ≥ 372636debe852913529b1716f44addd94fff2d28, < 5edae7a9a35606017ee6e05911c290acee9fee5a | ≥ 8f4f68e788c3a7a696546291258bfa5fdb215523, < a8e0074ffb38c9a5964a221bb998034d016c93a2 | ≥ 8f4f68e788c3a7a696546291258bfa5fdb215523, < 7ddab756f2de5b7b43c122ebebdf37f400fb2b6f | ≥ 8f4f68e788c3a7a696546291258bfa5fdb215523, < 662f2f13e66d3883b9238b0b96b17886179e60e2 | fb2d3a50a8f29a3c66682bb426144f40e32ab818 | e134f3aba98e6c801a693f540912c2d493718ddf | ≥ 4.19.300, < 4.19.325 | ≥ 5.4.262, < 5.4.287 | ≥ 5.10.202, < 5.10.231 | ≥ 5.15.140, < 5.15.174 | ≥ 6.1.64, < 6.1.120 | ≥ 6.6.3, < 6.6.64 | ≥ 4.14.331, < 4.15 | ≥ 6.5.13, < 6.6 | 6.7
  • linux_kernel≥ 4.14.331, < 4.15 | ≥ 4.19.300, < 4.19.325 | ≥ 5.4.262, < 5.4.287 | ≥ 5.10.202, < 5.10.231 | ≥ 5.15.140, < 5.15.174 | ≥ 6.1.64, < 6.1.120 | ≥ 6.5.13, < 6.6 | ≥ 6.6.3, < 6.6.64 | ≥ 6.7, < 6.11.11 | ≥ 6.12, < 6.12.2
Debian1 product
  • linux< 6.1.123-1 | < 6.12.3-1

4 vendors · 200 products · Showing 200 of 224. Use Open JSON for the complete list.

References

56 links
Show all 56 references