In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Using completion_done to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called wait_for_completion, resulting in another potential UAF. Fix this by making the caller use cancel_work_sync and then freeing the memory safely.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-07-10T07:18:39.443Z

Updated: 2024-12-19T09:07:15.394Z

Reserved: 2024-06-25T14:23:23.748Z

Link: CVE-2024-39493

cve-icon Vulnrichment

Updated: 2024-08-02T04:26:16.000Z

cve-icon NVD

Status : Modified

Published: 2024-07-10T08:15:11.427

Modified: 2024-11-21T09:27:48.673

Link: CVE-2024-39493

cve-icon Redhat

Severity : Moderate

Publid Date: 2024-07-10T00:00:00Z

Links: CVE-2024-39493 - Bugzilla