CVE-2024-36031keys: Fix overwrite of key expiration on instantiation
- 9.8CriticalCVSS base score
- 0.75%Exploitation in 30 daysEPSS · top 45% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: keys: Fix overwrite of key expiration on instantiation The expiry time of a key is unconditionally overwritten during instantiation, defaulting to turn it permanent. This causes a problem for DNS resolution as the expiration set by user-space is overwritten to TIME64_MAX, disabling further DNS updates. Fix this by restoring the condition that key_set_expiry is only called when the pre-parser sets a specific expiry.
Timeline
ID reserved
By Linux
- 13 days later
· 13 days later
Published
- 24 months later
· 24 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| CISA-ADPADP (enrichment) | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.75% · top 45% of all CVEs (14 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: yes · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.
Affected products
- affected 97be1e865e70e5a0ad0a5b5f5dca5031ca0b53ac – < ad2011ea787928b2accb5134f1e423b11fe80a8a
- affected 2552b32b0b349df160a509fe49f5f308cb922f2b – < ed79b93f725cd0da39a265dc23d77add1527b9be
- affected 791d5409cdb974c31a1bc7a903ea729ddc7d83df – < e4519a016650e952ad9eb27937f8c447d5a4e06d
- affected afc360e8a1256acb7579a6f5b6f2c30b85b39301 – < 25777f3f4e1f371d16a594925f31e37ce07b6ec7
- affected 39299bdd2546688d92ed9db4948f6219ca1b9542 – < 939a08bcd4334bad4b201e60bd0ae1f278d71d41
- affected 39299bdd2546688d92ed9db4948f6219ca1b9542 – < cc219cb8afbc40ec100c0de941047bb29373126a
- affected 39299bdd2546688d92ed9db4948f6219ca1b9542 – < 9da27fb65a14c18efd4473e2e82b76b53ba60252
- affected 5.10.206 – < 5.10.217
- affected 5.15.146 – < 5.15.159
- affected 6.1.70 – < 6.1.91
- affected 6.6.9 – < 6.6.31
- affected 6.7
- unaffected < 6.7
- unaffected 5.10.217 – ≤ 5.10.*
- unaffected 5.15.159 – ≤ 5.15.*
- unaffected 6.1.91 – ≤ 6.1.*
- unaffected 6.6.31 – ≤ 6.6.*
- unaffected 6.8.10 – ≤ 6.8.*
- unaffected 6.9.1 – ≤ 6.9.*
- unaffected 6.10 – ≤ *
References
References8
- https://git.kernel.org/stable/c/ad2011ea787928b2accb5134f1e423b11fe80a8a (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/ed79b93f725cd0da39a265dc23d77add1527b9be (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/e4519a016650e952ad9eb27937f8c447d5a4e06d (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/25777f3f4e1f371d16a594925f31e37ce07b6ec7 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/939a08bcd4334bad4b201e60bd0ae1f278d71d41 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/cc219cb8afbc40ec100c0de941047bb29373126a (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/9da27fb65a14c18efd4473e2e82b76b53ba60252 (opens in a new tab)x_transferred
- https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-35841 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-36031)Record last updated .