CVE-2023-53799

Summary

In the Linux kernel, the following vulnerability has been resolved:

crypto: api - Use work queue in crypto_destroy_instance

The function crypto_drop_spawn expects to be called in process context. However, when an instance is unregistered while it still has active users, the last user may cause the instance to be freed in atomic context.

Fix this by delaying the freeing to a work queue.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux6bfd48096ff8ecabf955958b51ddfa7988eb0a14 < 625bf86bf53eb7a8ee60fb9dc45b272b77e5ce1caffected
LinuxLinux6bfd48096ff8ecabf955958b51ddfa7988eb0a14 < 048545d9fc6424b0a11e7e8771225bb9afe09422affected
LinuxLinux6bfd48096ff8ecabf955958b51ddfa7988eb0a14 < c4cb61c5f976183c07d16b0071f0c60bc212ef1faffected
LinuxLinux6bfd48096ff8ecabf955958b51ddfa7988eb0a14 < 867a146690960ac7b89ce40f4ee60dd32eeb1682affected
LinuxLinux6bfd48096ff8ecabf955958b51ddfa7988eb0a14 < c0dbcebc7f390ec7dbe010dcc22c60f0c6bfc26daffected
LinuxLinux6bfd48096ff8ecabf955958b51ddfa7988eb0a14 < 9ae4577bc077a7e32c3c7d442c95bc76865c0f17affected
LinuxLinux2.6.19affected
LinuxLinux0 < 2.6.19unaffected
LinuxLinux5.10.195 <= 5.10.*unaffected
LinuxLinux5.15.132 <= 5.15.*unaffected
LinuxLinux6.1.53 <= 6.1.*unaffected
LinuxLinux6.4.16 <= 6.4.*unaffected
LinuxLinux6.5.3 <= 6.5.*unaffected
LinuxLinux6.6 <= *unaffected

Weaknesses

References