Skip to main content
← All vulnerabilities
CVE-2026-93162

crypto: qat - cancel work on re-enable SR-IOV timeout

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.12.110, 6.18.52, 7.2.6
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - cancel work on re-enable SR-IOV timeout The QAT reset worker queues SR-IOV reenable work using a work_struct and completion embedded in an on-stack adf_sriov_dev_data. If the completion wait times out, the reset worker can return while device_sriov_wq still holds or executes the stack-backed work item. Cancel the work on the device_sriov_wq on timeout before the stack frame unwinds.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 4469f9b2346834085fe4478ee1a851ee1de8ccb2 · fixed in cbeef7ba0de4a7b84a772eee1784948473e7a7e6; From 4469f9b2346834085fe4478ee1a851ee1de8ccb2 · fixed in 6b19f343ae8ada4c84209bc6f62d50ea9781c4ae; From 4469f9b2346834085fe4478ee1a851ee1de8ccb2 · fixed in 1a106c6e17525827ee6d8091bb8c06fafbc21fed; From 4469f9b2346834085fe4478ee1a851ee1de8ccb2 · fixed in 455b0f3ac9e254edab9f5a873d337abe5e6e3604

  • Linux Linux

    6.9

  • KernelLinux

    From 6.9.0 · fixed in 6.12.110; From 6.13.0 · fixed in 6.18.52; From 6.19.0 · fixed in 7.2.6

References 4

git.kernel.org