Description
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Using completion_done to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called wait_for_completion, resulting in another potential UAF. Fix this by making the caller use cancel_work_sync and then freeing the memory safely.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
daba62d9eeddcc5b1081be7d348ca836c83c59d7 to < 0ce5964b82f212f4df6a9813f09a0b5de15bd9c8affected8e81cd58aee14a470891733181a47d123193ba81 to < 6396b33e98c096bff9c253ed49c008247963492aaffectedd03092550f526a79cf1ade7f0dfa74906f39eb71 to < a718b6d2a329e069b27d9049a71be5931e71d960affected4ae5a97781ce7d6ecc9c7055396535815b64ca4f to < 3fb4601e0db10d4fe25e46f3fa308d40d37366bdaffected226fc408c5fcd23cc4186f05ea3a09a7a9aef2f7 to < e7428e7e3fe94a5089dc12ffe5bc31574d2315adaffected8a5a7611ccc7b1fba8d933a9f22a2e76859d94dc to < c2d443aa1ae3175c13a665f3a24b8acd759ce9c3affected7d42e097607c4d246d99225bf2b195b6167a210c to < d0fd124972724cce0d48b9865ce3e273ef69e246affected7d42e097607c4d246d99225bf2b195b6167a210c to < d3b17c6d9dddc2db3670bc9be628b122416a3d26affected0c2cf5142bfb634c0ef0a1a69cdf37950747d0beaffectedbb279ead42263e9fb09480f02a4247b2c287d828affected4.19.312 to < 4.19.316affected5.4.274 to < 5.4.278affected5.10.215 to < 5.10.219affected5.15.154 to < 5.15.161affected6.1.84 to < 6.1.94affected6.6.24 to < 6.6.34affected6.7.12 to < 6.8affected6.8.3 to < 6.9affected
Linux Linux
Default version status: affected
6.9affected0 to < 6.9unaffected4.19.316 to ≤ 4.19.*unaffected5.4.278 to ≤ 5.4.*unaffected5.10.219 to ≤ 5.10.*unaffected5.15.161 to ≤ 5.15.*unaffected6.1.94 to ≤ 6.1.*unaffected6.6.34 to ≤ 6.6.*unaffected6.9.5 to ≤ 6.9.*unaffected6.10 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/0ce5964b82f212f4df6a9813f09a0b5de15bd9c8 ↗
- https://git.kernel.org/stable/c/6396b33e98c096bff9c253ed49c008247963492a ↗
- https://git.kernel.org/stable/c/a718b6d2a329e069b27d9049a71be5931e71d960 ↗
- https://git.kernel.org/stable/c/3fb4601e0db10d4fe25e46f3fa308d40d37366bd ↗
- https://git.kernel.org/stable/c/e7428e7e3fe94a5089dc12ffe5bc31574d2315ad ↗
- https://git.kernel.org/stable/c/c2d443aa1ae3175c13a665f3a24b8acd759ce9c3 ↗
- https://git.kernel.org/stable/c/d0fd124972724cce0d48b9865ce3e273ef69e246 ↗
- https://git.kernel.org/stable/c/d3b17c6d9dddc2db3670bc9be628b122416a3d26 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html ↗