crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.24 % · percentile 15 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Using completion_done to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called wait_for_completion, resulting in another potential UAF. Fix this by making the caller use cancel_work_sync and then freeing the memory safely.
Weaknesses (CWE)
- CWE-401 — Missing Release of Memory after Effective Lifetime
References
- https://git.kernel.org/stable/c/0ce5964b82f212f4df6a9813f09a0b5de15bd9c8
- https://git.kernel.org/stable/c/6396b33e98c096bff9c253ed49c008247963492a
- https://git.kernel.org/stable/c/a718b6d2a329e069b27d9049a71be5931e71d960
- https://git.kernel.org/stable/c/3fb4601e0db10d4fe25e46f3fa308d40d37366bd
- https://git.kernel.org/stable/c/e7428e7e3fe94a5089dc12ffe5bc31574d2315ad
- https://git.kernel.org/stable/c/c2d443aa1ae3175c13a665f3a24b8acd759ce9c3
- https://git.kernel.org/stable/c/d0fd124972724cce0d48b9865ce3e273ef69e246
- https://git.kernel.org/stable/c/d3b17c6d9dddc2db3670bc9be628b122416a3d26
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2024-38019
- GCVE · GCVE-0-2024-39493
CERT-FR advisories
- CERTFR-2025-AVI-1057 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0823 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0822 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0799 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0779 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0778 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0717 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0716 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0694 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0693 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0667 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2024-AVI-0613 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.19.312 < 4.19.316cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.4.274 < 5.4.278cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.10.215 < 5.10.219cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.15.154 < 5.15.161cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.1.84 < 6.1.94cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.6.24 < 6.6.34cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.9 < 6.9.5
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected daba62d9eeddcc5b1081be7d348ca836c83c59d7 < 0ce5964b82f212f4df6a9813f09a0b5de15bd9c8 ; affected 8e81cd58aee14a470891733181a47d123193ba81 < 6396b33e98c096bff9c253ed49c008247963492a ; affected d03092550f526a79cf1ade7f0dfa74906f39eb71 < a718b6d2a329e069b27d9049a71be5931e71d960 ; affected 4ae5a97781ce7d6ecc9c7055396535815b64ca4f < 3fb4601e0db10d4fe25e46f3fa308d40d37366bd ; affected 226fc408c5fcd23cc4186f05ea3a09a7a9aef2f7 < e7428e7e3fe94a5089dc12ffe5bc31574d2315ad ; affected 8a5a7611ccc7b1fba8d933a9f22a2e76859d94dc < c2d443aa1ae3175c13a665f3a24b8acd759ce9c3 |
| Linux · Linux | affected 6.9 ; unaffected 0 < 6.9 ; unaffected 4.19.316 ≤ 4.19.* ; unaffected 5.4.278 ≤ 5.4.* ; unaffected 5.10.219 ≤ 5.10.* ; unaffected 5.15.161 ≤ 5.15.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |