Description
In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parallel fallback pcrypt installs pcrypt_aead_done() on the child AEAD request before trying to submit it through padata. If padata_do_parallel() returns -EBUSY, pcrypt falls back to calling the child AEAD directly. That fallback must not keep the padata completion callback. Otherwise an asynchronous completion runs pcrypt_aead_done() even though the request was never enrolled in padata. Restore the original request callback and callback data before calling the child AEAD directly. This keeps the fallback path aligned with a direct AEAD request while leaving the parallel path unchanged.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
a92ccd3618e42333ac6f150ecdac14dca298bc7a to < 81ce16d938db9b88cdc231522c0358395ae8c6b5affected96001f52ae8c70e2c736d3e1e5dc53d5b521e5ca to < 3920c5f6edc341729d20d0507e466c6d3b11f372affected92834692a539b5b7f409e467a14667d64713b732 to < ae93c5b3e2a2968b56d772ca1d06615927b7cc36affected5edae7a9a35606017ee6e05911c290acee9fee5a to < 82789a44415e3e31168229421b138278dfb16412affected7ddab756f2de5b7b43c122ebebdf37f400fb2b6f to < 4711ca06bd169a2cbc9cc59a6de2ed512c41a880affected662f2f13e66d3883b9238b0b96b17886179e60e2 to < c4bd2f4c35b0e15b6040c2f7e7e7986780c066cfaffected662f2f13e66d3883b9238b0b96b17886179e60e2 to < 83fa1397d5853de1e27dd52ec44b068ff358ca18affected662f2f13e66d3883b9238b0b96b17886179e60e2 to < ed459fe319376e876de433d12b6c6772e612ca36affecteddd8bf8eb5beba1e7c3b11a9a5a58ccbf345a69e6affectedfca8aed12218f96b38e374ff264d78ea1fbd23ccaffecteda8e0074ffb38c9a5964a221bb998034d016c93a2affected5.10.231 to < 5.10.261affected5.15.174 to < 5.15.212affected6.1.120 to < 6.1.178affected6.6.64 to < 6.6.145affected6.12.2 to < 6.12.96affected4.19.325 to < 4.20affected5.4.287 to < 5.5affected6.11.11 to < 6.12affected
Linux Linux
Default version status: affected
6.13affected0 to < 6.13unaffected5.10.261 to ≤ 5.10.*unaffected5.15.212 to ≤ 5.15.*unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.96 to ≤ 6.12.*unaffected6.18.39 to ≤ 6.18.*unaffected7.1.4 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/81ce16d938db9b88cdc231522c0358395ae8c6b5 ↗
- https://git.kernel.org/stable/c/3920c5f6edc341729d20d0507e466c6d3b11f372 ↗
- https://git.kernel.org/stable/c/ae93c5b3e2a2968b56d772ca1d06615927b7cc36 ↗
- https://git.kernel.org/stable/c/82789a44415e3e31168229421b138278dfb16412 ↗
- https://git.kernel.org/stable/c/4711ca06bd169a2cbc9cc59a6de2ed512c41a880 ↗
- https://git.kernel.org/stable/c/c4bd2f4c35b0e15b6040c2f7e7e7986780c066cf ↗
- https://git.kernel.org/stable/c/83fa1397d5853de1e27dd52ec44b068ff358ca18 ↗
- https://git.kernel.org/stable/c/ed459fe319376e876de433d12b6c6772e612ca36 ↗