CVE-2024-39493

crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak

State: Published
Severity: Not scored
Published: Jul 10, 2024
Updated: Oct 15, 2026
Reserved: Jun 25, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak

Using completion_done to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called wait_for_completion, resulting in another potential UAF.

Fix this by making the caller use cancel_work_sync and then freeing the memory safely.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	daba62d9eeddcc5b1081be7d348ca836c83c59d7 to before 0ce5964b82f212f4df6a9813f09a0b5de15bd9c8Affected 8e81cd58aee14a470891733181a47d123193ba81 to before 6396b33e98c096bff9c253ed49c008247963492aAffected d03092550f526a79cf1ade7f0dfa74906f39eb71 to before a718b6d2a329e069b27d9049a71be5931e71d960Affected 4ae5a97781ce7d6ecc9c7055396535815b64ca4f to before 3fb4601e0db10d4fe25e46f3fa308d40d37366bdAffected 226fc408c5fcd23cc4186f05ea3a09a7a9aef2f7 to before e7428e7e3fe94a5089dc12ffe5bc31574d2315adAffected 8a5a7611ccc7b1fba8d933a9f22a2e76859d94dc to before c2d443aa1ae3175c13a665f3a24b8acd759ce9c3Affected 7d42e097607c4d246d99225bf2b195b6167a210c to before d0fd124972724cce0d48b9865ce3e273ef69e246Affected 7d42e097607c4d246d99225bf2b195b6167a210c to before d3b17c6d9dddc2db3670bc9be628b122416a3d26Affected 0c2cf5142bfb634c0ef0a1a69cdf37950747d0beAffected bb279ead42263e9fb09480f02a4247b2c287d828Affected 4.19.312 to before 4.19.316Affected 5.4.274 to before 5.4.278Affected 5.10.215 to before 5.10.219Affected 5.15.154 to before 5.15.161Affected 6.1.84 to before 6.1.94Affected 6.6.24 to before 6.6.34Affected 6.7.12 to before 6.8Affected 6.8.3 to before 6.9Affected
LinuxLinux	6.9Affected before 6.9Not affected 4.19.316 through 4.19.Not affected 5.4.278 through 5.4.Not affected 5.10.219 through 5.10.Not affected 5.15.161 through 5.15.Not affected 6.1.94 through 6.1.Not affected 6.6.34 through 6.6.Not affected 6.9.5 through 6.9.*Not affected 6.10 and laterNot affected

Product

Versions

LinuxLinux

daba62d9eeddcc5b1081be7d348ca836c83c59d7 to before 0ce5964b82f212f4df6a9813f09a0b5de15bd9c8Affected
8e81cd58aee14a470891733181a47d123193ba81 to before 6396b33e98c096bff9c253ed49c008247963492aAffected
d03092550f526a79cf1ade7f0dfa74906f39eb71 to before a718b6d2a329e069b27d9049a71be5931e71d960Affected
4ae5a97781ce7d6ecc9c7055396535815b64ca4f to before 3fb4601e0db10d4fe25e46f3fa308d40d37366bdAffected
226fc408c5fcd23cc4186f05ea3a09a7a9aef2f7 to before e7428e7e3fe94a5089dc12ffe5bc31574d2315adAffected
8a5a7611ccc7b1fba8d933a9f22a2e76859d94dc to before c2d443aa1ae3175c13a665f3a24b8acd759ce9c3Affected
7d42e097607c4d246d99225bf2b195b6167a210c to before d0fd124972724cce0d48b9865ce3e273ef69e246Affected
7d42e097607c4d246d99225bf2b195b6167a210c to before d3b17c6d9dddc2db3670bc9be628b122416a3d26Affected
0c2cf5142bfb634c0ef0a1a69cdf37950747d0beAffected
bb279ead42263e9fb09480f02a4247b2c287d828Affected
4.19.312 to before 4.19.316Affected
5.4.274 to before 5.4.278Affected
5.10.215 to before 5.10.219Affected
5.15.154 to before 5.15.161Affected
6.1.84 to before 6.1.94Affected
6.6.24 to before 6.6.34Affected
6.7.12 to before 6.8Affected
6.8.3 to before 6.9Affected

LinuxLinux

6.9Affected
before 6.9Not affected
4.19.316 through 4.19.*Not affected
5.4.278 through 5.4.*Not affected
5.10.219 through 5.10.*Not affected
5.15.161 through 5.15.*Not affected
6.1.94 through 6.1.*Not affected
6.6.34 through 6.6.*Not affected
6.9.5 through 6.9.*Not affected
6.10 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.