CVE - CVE-2024-36031

CVE-ID
CVE-2024-36031	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: keys: Fix overwrite of key expiration on instantiation The expiry time of a key is unconditionally overwritten during instantiation, defaulting to turn it permanent. This causes a problem for DNS resolution as the expiration set by user-space is overwritten to TIME64_MAX, disabling further DNS updates. Fix this by restoring the condition that key_set_expiry is only called when the pre-parser sets a specific expiry.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/25777f3f4e1f371d16a594925f31e37ce07b6ec7 URL:https://git.kernel.org/stable/c/25777f3f4e1f371d16a594925f31e37ce07b6ec7 MISC:https://git.kernel.org/stable/c/939a08bcd4334bad4b201e60bd0ae1f278d71d41 URL:https://git.kernel.org/stable/c/939a08bcd4334bad4b201e60bd0ae1f278d71d41 MISC:https://git.kernel.org/stable/c/9da27fb65a14c18efd4473e2e82b76b53ba60252 URL:https://git.kernel.org/stable/c/9da27fb65a14c18efd4473e2e82b76b53ba60252 MISC:https://git.kernel.org/stable/c/ad2011ea787928b2accb5134f1e423b11fe80a8a URL:https://git.kernel.org/stable/c/ad2011ea787928b2accb5134f1e423b11fe80a8a MISC:https://git.kernel.org/stable/c/cc219cb8afbc40ec100c0de941047bb29373126a URL:https://git.kernel.org/stable/c/cc219cb8afbc40ec100c0de941047bb29373126a MISC:https://git.kernel.org/stable/c/e4519a016650e952ad9eb27937f8c447d5a4e06d URL:https://git.kernel.org/stable/c/e4519a016650e952ad9eb27937f8c447d5a4e06d MISC:https://git.kernel.org/stable/c/ed79b93f725cd0da39a265dc23d77add1527b9be URL:https://git.kernel.org/stable/c/ed79b93f725cd0da39a265dc23d77add1527b9be
Assigning CNA
kernel.org
Date Record Created
20240517	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240517)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)