CVE-2024-35926

2024-05-2013:45:22

redhat.com

access.redhat.com

linux kernel

vulnerability

cve-2024-35926

async_disable

descriptor leak

mitigation

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix async_disable descriptor leak The disable_async paths of iaa_compress/decompress() don’t free idxd descriptors in the async_disable case. Currently this only happens in the testcases where req->dst is set to null. Add a test to free them in those paths.