Riskcovery

CVE-2023-54046

crypto: essiv - Handle EBUSY correctly

State
Published
Severity
7.8 High
Published
Dec 24, 2025
Updated
Oct 15, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: essiv - Handle EBUSY correctly

As it is essiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request.

However, as the caller of essiv may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to before c61e7d182ee3f3f5ecf18a2964e303d49c539b52Affected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to before 796e02cca30a67322161f0745e5ce994bbe75605Affected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to before 840a1d3b77c1b062bd62b4733969a5b1efc274ceAffected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to before a006aa3eedb8bfd6fe317c3cfe9c86ffe76b2385Affected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to before 69c67d451fc19d88e54f7d97e8e7c093e08357e1Affected
  • be1eb7f78aa8fbe34779c56c266ccd0364604e71 to before b5a772adf45a32c68bef28e60621f12617161556Affected
LinuxLinux
  • 5.4Affected
  • before 5.4Not affected
  • 5.4.235 through 5.4.*Not affected
  • 5.10.173 through 5.10.*Not affected
  • 5.15.99 through 5.15.*Not affected
  • 6.1.16 through 6.1.*Not affected
  • 6.2.3 through 6.2.*Not affected
  • 6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.