CVE-2023-54046

Linux Kernel 5.4.0-6.2.2 Use-After-Free in ESSIV Crypto Handler

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Handle EBUSY correctly As it is essiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. However, as the caller of essiv may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.

Scores

EPSS 0.0022
EPSS Percentile 12.6%

Details

Status published
Products (19)
linux/Kernel 5.11.0 - 5.15.99linux
linux/Kernel 5.16.0 - 6.1.16linux
linux/Kernel 5.4.0 - 5.4.235linux
linux/Kernel 5.5.0 - 5.10.173linux
linux/Kernel 6.2.0 - 6.2.3linux
Linux/Linux < 5.4
Linux/Linux 5.10.173 - 5.10.*
Linux/Linux 5.15.99 - 5.15.*
Linux/Linux 5.4
Linux/Linux 5.4.235 - 5.4.*
... and 9 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026