CVE-2023-54046
Linux Kernel 5.4.0-6.2.2 Use-After-Free in ESSIV Crypto Handler
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Handle EBUSY correctly As it is essiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. However, as the caller of essiv may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.
References (6)
Core 6
Core References
Scores
EPSS
0.0022
EPSS Percentile
12.6%
Details
Status
published
Products (19)
linux/Kernel
5.11.0 - 5.15.99linux
linux/Kernel
5.16.0 - 6.1.16linux
linux/Kernel
5.4.0 - 5.4.235linux
linux/Kernel
5.5.0 - 5.10.173linux
linux/Kernel
6.2.0 - 6.2.3linux
Linux/Linux
< 5.4
Linux/Linux
5.10.173 - 5.10.*
Linux/Linux
5.15.99 - 5.15.*
Linux/Linux
5.4
Linux/Linux
5.4.235 - 5.4.*
... and 9 more
Published
Dec 24, 2025
Tracked Since
Feb 18, 2026