kernel: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

A use-after-free vulnerability was found in the Linux kernel's seqiv Sequence IV crypto module. After calling cryptoaeadencrypt, the underlying request may be freed by asynchronous completion handlers. The code then incorrectly dereferences req-iv to compare against info, accessing potentially...

The vulnerability of the crypto_aead_encrypt and crypto_aead_decrypt functions in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cryptoaeadencrypt and cryptoaeaddecrypt functions in the Linux operating system is related to the return of incorrect code states. Exploiting this vulnerability can allow an attacker to cause a service failure...