More information about this CVE will likely be available in a few days

Description


In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Using completion_done to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called wait_for_completion, resulting in another potential UAF. Fix this by making the caller use cancel_work_sync and then freeing the memory safely.

Related CPE's


Could not find any relations

Weaknesses


Could not find any weaknesses

CVSS impact metrics


Could not find any metrics

Information


Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Vulnerability status

Awaiting analysis

Published

2024-07-10T08:15:11.427

1 week ago

Last modified

2024-07-11T13:05:54.930

1 week ago