Description
In the Linux kernel, the following vulnerability has been resolved: crypto: xts - Handle EBUSY correctly As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request. However, as the caller of xts may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
8083b1bf8163e7ae7d8c90f221106d96450b8aa8 to < 92a07ba4f0af2cccdc2aa5ee32679c9c9714db90affected8083b1bf8163e7ae7d8c90f221106d96450b8aa8 to < 912eb10b65646ffd222256c78a1c566a3dac177daffected8083b1bf8163e7ae7d8c90f221106d96450b8aa8 to < 57c3e1d63b63dc0841d41df729297cd7c1c35808affected8083b1bf8163e7ae7d8c90f221106d96450b8aa8 to < d5870848879291700fe6c5257dcb48aadd10425caffected8083b1bf8163e7ae7d8c90f221106d96450b8aa8 to < 51c082514c2dedf2711c99d93c196cc4eedceb40affected
Linux Linux
Default version status: affected
5.4affected0 to < 5.4unaffected5.10.173 to ≤ 5.10.*unaffected5.15.99 to ≤ 5.15.*unaffected6.1.16 to ≤ 6.1.*unaffected6.2.3 to ≤ 6.2.*unaffected6.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/92a07ba4f0af2cccdc2aa5ee32679c9c9714db90 ↗
- https://git.kernel.org/stable/c/912eb10b65646ffd222256c78a1c566a3dac177d ↗
- https://git.kernel.org/stable/c/57c3e1d63b63dc0841d41df729297cd7c1c35808 ↗
- https://git.kernel.org/stable/c/d5870848879291700fe6c5257dcb48aadd10425c ↗
- https://git.kernel.org/stable/c/51c082514c2dedf2711c99d93c196cc4eedceb40 ↗