CVE-2023-53799

Linux Kernel - Use-After-Free in crypto_drop_spawn

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: api - Use work queue in crypto_destroy_instance The function crypto_drop_spawn expects to be called in process context. However, when an instance is unregistered while it still has active users, the last user may cause the instance to be freed in atomic context. Fix this by delaying the freeing to a work queue.

Scores

EPSS 0.0018
EPSS Percentile 8.2%

Details

Status published
Products (19)
linux/Kernel 2.6.19 - 5.10.195linux
linux/Kernel 5.11.0 - 5.15.132linux
linux/Kernel 5.16.0 - 6.1.53linux
linux/Kernel 6.2.0 - 6.4.16linux
linux/Kernel 6.5.0 - 6.5.3linux
Linux/Linux < 2.6.19
Linux/Linux 2.6.19
Linux/Linux 5.10.195 - 5.10.*
Linux/Linux 5.15.132 - 5.15.*
Linux/Linux 6.1.53 - 6.1.*
... and 9 more
Published Dec 09, 2025
Tracked Since Feb 18, 2026