{
  "id": "CVE-2024-36975",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2024-06-18T20:15:13.340",
  "lastModified": "2024-06-20T12:44:01.637",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nKEYS: trusted: Do not use WARN when encode fails\n\nWhen asn1_encode_sequence() fails, WARN is not the correct solution.\n\n1. asn1_encode_sequence() is not an internal function (located\n   in lib/asn1_encode.c).\n2. Location is known, which makes the stack trace useless.\n3. Results a crash if panic_on_warn is set.\n\nIt is also noteworthy that the use of WARN is undocumented, and it\nshould be avoided unless there is a carefully considered rationale to\nuse it.\n\nReplace WARN with pr_err, and print the return value instead, which is\nonly useful piece of information."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: LLAVES: confiable: no usar WARN cuando falla la codificaci\u00f3n Cuando falla asn1_encode_sequence(), WARN no es la soluci\u00f3n correcta. 1. asn1_encode_sequence() no es una funci\u00f3n interna (ubicada en lib/asn1_encode.c). 2. Se conoce la ubicaci\u00f3n, lo que hace que el seguimiento de la pila sea in\u00fatil. 3. Se produce un bloqueo si se configura p\u00e1nico_on_warn. Tambi\u00e9n es digno de menci\u00f3n que el uso de WARN no est\u00e1 documentado y debe evitarse a menos que exista una justificaci\u00f3n cuidadosamente considerada para su uso. Reemplace WARN con pr_err e imprima el valor de retorno, que es solo informaci\u00f3n \u00fatil."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/050bf3c793a07f96bd1e2fd62e1447f731ed733b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/1c652e1e10676f942149052d9329b8bf2703529a",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/681935009fec3fc22af97ee312d4a24ccf3cf087",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/96f650995c70237b061b497c66755e32908f8972",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/d32c6e09f7c4bec3ebc4941323f0aa6366bc1487",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ff91cc12faf798f573dab2abc976c1d5b1862fea",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}