CVE-2024-35926

crypto: iaa - Fix async_disable descriptor leak

published May 19, 2024

CVSS
—
EPSS
0%
Percentile
7.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - Fix async_disable descriptor leak

The disable_async paths of iaa_compress/decompress() don't free idxd

descriptors in the async_disable case. Currently this only happens in

the testcases where req->dst is set to null. Add a test to free them

in those paths.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00184 · 7.6th percentile
Published
2024-05-19T10:10Z
EPSS history
Timeline
  • 19 MAY 10:10Z
    crypto: iaa - Fix async_disable descriptor leak
    cvelistv5