Riskcovery

CVE-2024-35926

crypto: iaa - Fix async_disable descriptor leak

State
Published
Severity
Not scored
Published
May 19, 2024
Updated
May 11, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - Fix async_disable descriptor leak

The disable_async paths of iaa_compress/decompress() don't free idxd descriptors in the async_disable case. Currently this only happens in the testcases where req->dst is set to null. Add a test to free them in those paths.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ea7a5cbb43696cfacf73e61916d1860ac30b5b2f to before d994f7d77aaded05dc05af58a2720fd4f4b72a83Affected
  • ea7a5cbb43696cfacf73e61916d1860ac30b5b2f to before 262534ddc88dfea7474ed18adfecf856e4fbe054Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.8.6 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.