Lucene search

K
nvd416baaa9-dc9f-4396-8d5f-8c081fb06d67NVD:CVE-2024-35926
HistoryMay 19, 2024 - 11:15 a.m.

CVE-2024-35926

2024-05-1911:15:48
416baaa9-dc9f-4396-8d5f-8c081fb06d67
web.nvd.nist.gov
linux kernel
vulnerability
resolved
crypto
module
async_disable
descriptor
leak
iaa_compress
iaa_decompress
idxd
testcases

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - Fix async_disable descriptor leak

The disable_async paths of iaa_compress/decompress() don’t free idxd
descriptors in the async_disable case. Currently this only happens in
the testcases where req->dst is set to null. Add a test to free them
in those paths.

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%