Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-39493

crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Using completion_done to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called wait_for_completion, resulting in another potential UAF. Fix this by making the caller use cancel_work_sync and then freeing the memory safely.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • daba62d9eeddcc5b1081be7d348ca836c83c59d7 to < 0ce5964b82f212f4df6a9813f09a0b5de15bd9c8affected
  • 8e81cd58aee14a470891733181a47d123193ba81 to < 6396b33e98c096bff9c253ed49c008247963492aaffected
  • d03092550f526a79cf1ade7f0dfa74906f39eb71 to < a718b6d2a329e069b27d9049a71be5931e71d960affected
  • 4ae5a97781ce7d6ecc9c7055396535815b64ca4f to < 3fb4601e0db10d4fe25e46f3fa308d40d37366bdaffected
  • 226fc408c5fcd23cc4186f05ea3a09a7a9aef2f7 to < e7428e7e3fe94a5089dc12ffe5bc31574d2315adaffected
  • 8a5a7611ccc7b1fba8d933a9f22a2e76859d94dc to < c2d443aa1ae3175c13a665f3a24b8acd759ce9c3affected
  • 7d42e097607c4d246d99225bf2b195b6167a210c to < d0fd124972724cce0d48b9865ce3e273ef69e246affected
  • 7d42e097607c4d246d99225bf2b195b6167a210c to < d3b17c6d9dddc2db3670bc9be628b122416a3d26affected
  • 0c2cf5142bfb634c0ef0a1a69cdf37950747d0beaffected
  • bb279ead42263e9fb09480f02a4247b2c287d828affected
  • 4.19.312 to < 4.19.316affected
  • 5.4.274 to < 5.4.278affected
  • 5.10.215 to < 5.10.219affected
  • 5.15.154 to < 5.15.161affected
  • 6.1.84 to < 6.1.94affected
  • 6.6.24 to < 6.6.34affected
  • 6.7.12 to < 6.8affected
  • 6.8.3 to < 6.9affected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 4.19.316 to ≤ 4.19.*unaffected
  • 5.4.278 to ≤ 5.4.*unaffected
  • 5.10.219 to ≤ 5.10.*unaffected
  • 5.15.161 to ≤ 5.15.*unaffected
  • 6.1.94 to ≤ 6.1.*unaffected
  • 6.6.34 to ≤ 6.6.*unaffected
  • 6.9.5 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References