crypto: qat - protect service table iterations with service_lock (Linux Linux)

CVE-2026-64305
HIGH 7.8

En bref

Source
NVD
EPSS
EPSS 0.13 % · centile 2 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Modified

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect service table iterations with service_lock The service_table list is protected by service_lock when entries are added or removed (in adf_service_add() and adf_service_remove()), but several functions iterate over the list without holding this lock. A concurrent adf_service_register() or adf_service_unregister() call could modify the list during traversal, leading to list corruption or a use-after-free. Fix this by holding service_lock across all list_for_each_entry() iterations of service_table in adf_dev_init(), adf_dev_start(), adf_dev_stop(), adf_dev_shutdown(), adf_dev_restarting_notify(), adf_dev_restarted_notify(), and adf_error_notifier(). The lock ordering is safe: callers of the static helpers (adf_dev_up() and adf_dev_down()) acquire state_lock before service_lock, and no event_hld callback or service_lock holder ever acquires state_lock in the reverse order.

Faiblesses (CWE)

  • CWE-416 — Utilisation après libération

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1HIGH 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HNVD · nvd@nist.gov (Primary)

Références européennes

Avis du CERT-FR

Configurations affectées (CPE NVD)

Produits affectés

ProduitVersions
Linux · Linuxaffected d8cba25d2c68992a6e7c1d329b690a9ebe01167d < d36bff434e01d06d1e1fa98aa2b34ec32185c1ab ; affected d8cba25d2c68992a6e7c1d329b690a9ebe01167d < 11d48f777cf8fad00db044f4c15cdf821427746b ; affected d8cba25d2c68992a6e7c1d329b690a9ebe01167d < 222fa7b453b612f4407f260146d89a2ce2bc831d ; affected d8cba25d2c68992a6e7c1d329b690a9ebe01167d < c3c5925791cff3b84d313293fd60f384d877d793 ; affected d8cba25d2c68992a6e7c1d329b690a9ebe01167d < 0dbcecea740d943002c1cbdafa39bdfc108e32a5 ; affected d8cba25d2c68992a6e7c1d329b690a9ebe01167d < 5c6f845e77ec35f9b7b047cc8f9789bf397cdd3e
Linux · Linuxaffected 3.17 ; unaffected 0 < 3.17 ; unaffected 6.1.191 ≤ 6.1.* ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.12.96 ≤ 6.12.* ; unaffected 6.18.39 ≤ 6.18.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD