Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-35926

crypto: iaa - Fix async_disable descriptor leak

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix async_disable descriptor leak The disable_async paths of iaa_compress/decompress() don't free idxd descriptors in the async_disable case. Currently this only happens in the testcases where req->dst is set to null. Add a test to free them in those paths.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ea7a5cbb43696cfacf73e61916d1860ac30b5b2f to < d994f7d77aaded05dc05af58a2720fd4f4b72a83affected
  • ea7a5cbb43696cfacf73e61916d1860ac30b5b2f to < 262534ddc88dfea7474ed18adfecf856e4fbe054affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.8.6 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References