CVE-2023-53799

crypto: api - Use work queue in crypto_destroy_instance

State: Published
Severity: Not scored
Published: Dec 9, 2025
Updated: May 11, 2026
Reserved: Dec 8, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: api - Use work queue in crypto_destroy_instance

The function crypto_drop_spawn expects to be called in process context. However, when an instance is unregistered while it still has active users, the last user may cause the instance to be freed in atomic context.

Fix this by delaying the freeing to a work queue.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	6bfd48096ff8ecabf955958b51ddfa7988eb0a14 to before 625bf86bf53eb7a8ee60fb9dc45b272b77e5ce1cAffected 6bfd48096ff8ecabf955958b51ddfa7988eb0a14 to before 048545d9fc6424b0a11e7e8771225bb9afe09422Affected 6bfd48096ff8ecabf955958b51ddfa7988eb0a14 to before c4cb61c5f976183c07d16b0071f0c60bc212ef1fAffected 6bfd48096ff8ecabf955958b51ddfa7988eb0a14 to before 867a146690960ac7b89ce40f4ee60dd32eeb1682Affected 6bfd48096ff8ecabf955958b51ddfa7988eb0a14 to before c0dbcebc7f390ec7dbe010dcc22c60f0c6bfc26dAffected 6bfd48096ff8ecabf955958b51ddfa7988eb0a14 to before 9ae4577bc077a7e32c3c7d442c95bc76865c0f17Affected
LinuxLinux	2.6.19Affected before 2.6.19Not affected 5.10.195 through 5.10.Not affected 5.15.132 through 5.15.Not affected 6.1.53 through 6.1.Not affected 6.4.16 through 6.4.Not affected 6.5.3 through 6.5.*Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

6bfd48096ff8ecabf955958b51ddfa7988eb0a14 to before 625bf86bf53eb7a8ee60fb9dc45b272b77e5ce1cAffected
6bfd48096ff8ecabf955958b51ddfa7988eb0a14 to before 048545d9fc6424b0a11e7e8771225bb9afe09422Affected
6bfd48096ff8ecabf955958b51ddfa7988eb0a14 to before c4cb61c5f976183c07d16b0071f0c60bc212ef1fAffected
6bfd48096ff8ecabf955958b51ddfa7988eb0a14 to before 867a146690960ac7b89ce40f4ee60dd32eeb1682Affected
6bfd48096ff8ecabf955958b51ddfa7988eb0a14 to before c0dbcebc7f390ec7dbe010dcc22c60f0c6bfc26dAffected
6bfd48096ff8ecabf955958b51ddfa7988eb0a14 to before 9ae4577bc077a7e32c3c7d442c95bc76865c0f17Affected

LinuxLinux

2.6.19Affected
before 2.6.19Not affected
5.10.195 through 5.10.*Not affected
5.15.132 through 5.15.*Not affected
6.1.53 through 6.1.*Not affected
6.4.16 through 6.4.*Not affected
6.5.3 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.