Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2024-39493

crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.19.316, 5.4.278, 5.10.219, 5.15.161, 6.1.94, and 4 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Using completion_done to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called wait_for_completion, resulting in another potential UAF. Fix this by making the caller use cancel_work_sync and then freeing the memory safely.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From daba62d9eeddcc5b1081be7d348ca836c83c59d7 · fixed in 0ce5964b82f212f4df6a9813f09a0b5de15bd9c8; From 8e81cd58aee14a470891733181a47d123193ba81 · fixed in 6396b33e98c096bff9c253ed49c008247963492a; From d03092550f526a79cf1ade7f0dfa74906f39eb71 · fixed in a718b6d2a329e069b27d9049a71be5931e71d960; From 4ae5a97781ce7d6ecc9c7055396535815b64ca4f · fixed in 3fb4601e0db10d4fe25e46f3fa308d40d37366bd; From 226fc408c5fcd23cc4186f05ea3a09a7a9aef2f7 · fixed in e7428e7e3fe94a5089dc12ffe5bc31574d2315ad; From 8a5a7611ccc7b1fba8d933a9f22a2e76859d94dc · fixed in c2d443aa1ae3175c13a665f3a24b8acd759ce9c3; From 7d42e097607c4d246d99225bf2b195b6167a210c · fixed in d0fd124972724cce0d48b9865ce3e273ef69e246; From 7d42e097607c4d246d99225bf2b195b6167a210c · fixed in d3b17c6d9dddc2db3670bc9be628b122416a3d26; From 4.19.312 · fixed in 4.19.316; From 5.4.274 · fixed in 5.4.278; From 5.10.215 · fixed in 5.10.219; From 5.15.154 · fixed in 5.15.161; From 6.1.84 · fixed in 6.1.94; From 6.6.24 · fixed in 6.6.34; From 6.7.12 · fixed in 6.8; From 6.8.3 · fixed in 6.9

  • Linux Linux

    6.9

  • KernelLinux

    fixed in 4.19.316; From 4.20.0 · fixed in 5.4.278; From 5.5.0 · fixed in 5.10.219; From 5.11.0 · fixed in 5.15.161; From 5.16.0 · fixed in 6.1.94; From 6.2.0 · fixed in 6.6.34; From 6.7.0 · fixed in 6.9.5

References 8

git.kernel.org