Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-53373

crypto: seqiv - Handle EBUSY correctly

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Handle EBUSY correctly As it is seqiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. However, as the caller of seqiv may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to < cc4d0d4251748a8a68026938f4055d2ac47c5719affected
  • 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to < 1effbddaff60eeef8017c6dea1ee0ed970164d14affected
  • 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to < 63551e4b7cbcd9914258827699eb2cb6ed6e4a16affected
  • 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to < ae849d2f48019ff9c104e32bf588ccbfb200e971affected
  • 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to < 36ec108b7bd7e280edb22de028467bd09d644620affected
  • 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to < 4d497e8b200a175094e0ac252ed878add39b8771affected
  • 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to < 9477db935eb690f697d9bcc4f608927841bc8b36affected
  • 0a270321dbf948963aeb0e8382fe17d2c2eb3771 to < 32e62025e5e52fbe4812ef044759de7010b15dbcaffected

Linux Linux

Default version status: affected

  • 2.6.25affected
  • 0 to < 2.6.25unaffected
  • 4.14.308 to ≤ 4.14.*unaffected
  • 4.19.276 to ≤ 4.19.*unaffected
  • 5.4.235 to ≤ 5.4.*unaffected
  • 5.10.173 to ≤ 5.10.*unaffected
  • 5.15.99 to ≤ 5.15.*unaffected
  • 6.1.16 to ≤ 6.1.*unaffected
  • 6.2.3 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References