CVE-2024-26945

crypto: iaa - Fix nr_cpus < nr_iaa case

High · published May 1, 2024

CVSS v3.1
8.4
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - Fix nr_cpus < nr_iaa case

If nr_cpus < nr_iaa, the calculated cpus_per_iaa will be 0, which

causes a divide-by-0 in rebalance_wq_table().

Make sure cpus_per_iaa is 1 in that case, and also in the nr_iaa == 0

case, even though cpus_per_iaa is never used if nr_iaa == 0, for

paranoia.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.8th percentile
Published
2024-05-01T05:18Z
EPSS history
Timeline
  • 01 MAY 05:18Z
    crypto: iaa - Fix nr_cpus < nr_iaa case
    cvelistv5