CVEvulnerability
CVE-2024-39493
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-07-10
- Last modified
- 2026-10-15
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-401
Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
Using completion_done to determine whether the caller has gone
away only works after a complete call. Furthermore it's still
possible that the caller has not yet called wait_for_completion,
resulting in another potential UAF.
Fix this by making the caller use cancel_work_sync and then freeing
the memory safely.
Affected configurations
• linux linux kernel (>= 4.19.312 < 4.19.316)
• linux linux kernel (>= 5.4.274 < 5.4.278)
• linux linux kernel (>= 5.10.215 < 5.10.219)
• linux linux kernel (>= 5.15.154 < 5.15.161)
• linux linux kernel (>= 6.1.84 < 6.1.94)
• linux linux kernel (>= 6.6.24 < 6.6.34)
• linux linux kernel (>= 6.9 < 6.9.5)
Related
Weakness · CWE (1)
- CWE-401 Missing Release of Memory after Effective Lifetime weakness
References
- https://git.kernel.org/stable/c/0ce5964b82f212f4df6a9813f09a0b5de15bd9c8 Patch
- https://git.kernel.org/stable/c/3fb4601e0db10d4fe25e46f3fa308d40d37366bd Patch
- https://git.kernel.org/stable/c/6396b33e98c096bff9c253ed49c008247963492a Patch
- https://git.kernel.org/stable/c/a718b6d2a329e069b27d9049a71be5931e71d960 Patch
- https://git.kernel.org/stable/c/c2d443aa1ae3175c13a665f3a24b8acd759ce9c3 Patch
- https://git.kernel.org/stable/c/d0fd124972724cce0d48b9865ce3e273ef69e246 Patch
- https://git.kernel.org/stable/c/d3b17c6d9dddc2db3670bc9be628b122416a3d26 Patch
- https://git.kernel.org/stable/c/e7428e7e3fe94a5089dc12ffe5bc31574d2315ad Patch
- https://git.kernel.org/stable/c/0ce5964b82f212f4df6a9813f09a0b5de15bd9c8 Patch
- https://git.kernel.org/stable/c/3fb4601e0db10d4fe25e46f3fa308d40d37366bd Patch
- https://git.kernel.org/stable/c/6396b33e98c096bff9c253ed49c008247963492a Patch
- https://git.kernel.org/stable/c/a718b6d2a329e069b27d9049a71be5931e71d960 Patch
- https://git.kernel.org/stable/c/c2d443aa1ae3175c13a665f3a24b8acd759ce9c3 Patch
- https://git.kernel.org/stable/c/d0fd124972724cce0d48b9865ce3e273ef69e246 Patch
- https://git.kernel.org/stable/c/d3b17c6d9dddc2db3670bc9be628b122416a3d26 Patch
- https://git.kernel.org/stable/c/e7428e7e3fe94a5089dc12ffe5bc31574d2315ad Patch
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html cert-portal.siemens.com
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html cert-portal.siemens.com