CVE-2024-39493

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Using completion_done to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called wait_for_completion, resulting in another potential UAF. Fix this by making the caller use cancel_work_sync and then freeing the memory safely.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/0ce5964b82f212f4df6a9813f09a0b5de15bd9c8
https://git.kernel.org/stable/c/3fb4601e0db10d4fe25e46f3fa308d40d37366bd
https://git.kernel.org/stable/c/6396b33e98c096bff9c253ed49c008247963492a
https://git.kernel.org/stable/c/a718b6d2a329e069b27d9049a71be5931e71d960
https://git.kernel.org/stable/c/c2d443aa1ae3175c13a665f3a24b8acd759ce9c3
https://git.kernel.org/stable/c/d0fd124972724cce0d48b9865ce3e273ef69e246
https://git.kernel.org/stable/c/d3b17c6d9dddc2db3670bc9be628b122416a3d26
https://git.kernel.org/stable/c/e7428e7e3fe94a5089dc12ffe5bc31574d2315ad

Configurations

No configuration.

History

No history.

Information

Published : 2024-07-10 08:15

Updated : 2024-07-11 13:05

NVD link : CVE-2024-39493

Mitre link : CVE-2024-39493

CVE.ORG link : CVE-2024-39493

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2024-39493", "cveTags": [], "metrics": {}, "published": "2024-07-10T08:15:11.427", "references": [{"url": "https://git.kernel.org/stable/c/0ce5964b82f212f4df6a9813f09a0b5de15bd9c8", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/3fb4601e0db10d4fe25e46f3fa308d40d37366bd", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/6396b33e98c096bff9c253ed49c008247963492a", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a718b6d2a329e069b27d9049a71be5931e71d960", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c2d443aa1ae3175c13a665f3a24b8acd759ce9c3", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d0fd124972724cce0d48b9865ce3e273ef69e246", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d3b17c6d9dddc2db3670bc9be628b122416a3d26", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e7428e7e3fe94a5089dc12ffe5bc31574d2315ad", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: qat - Fix ADF_DEV_RESET_SYNC memory leak\n\nUsing completion_done to determine whether the caller has gone\naway only works after a complete call. Furthermore it's still\npossible that the caller has not yet called wait_for_completion,\nresulting in another potential UAF.\n\nFix this by making the caller use cancel_work_sync and then freeing\nthe memory safely."}, {"lang": "es", "value": "En el kernel de Linux, se resolvi\u00f3 la siguiente vulnerabilidad: crypto: qat: corrige la p\u00e9rdida de memoria ADF_DEV_RESET_SYNC. El uso de complete_done para determinar si la persona que llama se ha ido solo funciona despu\u00e9s de una llamada completa. Adem\u00e1s, a\u00fan es posible que la persona que llama a\u00fan no haya llamado a wait_for_completion, lo que genera otra posible UAF. Solucione este problema haciendo que la persona que llama use cancel_work_sync y luego liberando la memoria de forma segura."}], "lastModified": "2024-07-11T13:05:54.930", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}