CVE-2024-26957: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-26957 affects the Linux kernel's s390/zcrypt subsystem, specifically related to reference counting on zcrypt card objects. The vulnerability was discovered during tests with hot-plugging crypto cards on KVM guests with debug kernel builds, and was disclosed in May 2024 (NVD).

The vulnerability stems from an incorrect reference handling of the zcrypt card object which could lead to a use-after-free condition for the load field of the struct zcrypt_card. The issue occurs when the zcrypt card object could be freed while it was still in use, due to improper reference counting in the driver (Kernel Commit).

This vulnerability could result in a use-after-free condition in the Linux kernel's s390/zcrypt subsystem, potentially leading to system crashes or denial of service on affected systems (NVD).

The vulnerability requires access to a system with the s390/zcrypt subsystem and the ability to perform hot-plugging operations with crypto cards on KVM guests. The issue was discovered during testing with debug kernel builds (Kernel Commit).

The fix involves modifying the reference counting mechanism by adding zcrypt_card_get() before using the queue object and zcrypt_card_put() after use of the queue. This ensures proper reference handling of the card object. The fix has been implemented in the Linux kernel (Kernel Commit).