CVE-2023-53810

Summary: CVE-2023-53810 describes a race in the Linux kernel blk-mq crypto keyslot handling. When I/O completes, keyslots are not released until the request is freed, allowing blk_crypto_evict_key() to observe slot_refs != 0 even if there is no bug. This can trigger a use-after-free in blk_crypto...

CVE-2023-53810 blk-mq: release crypto keyslot before reporting I/O complete

In the Linux kernel, the following vulnerability has been resolved: blk-mq: release crypto keyslot before reporting I/O complete Once all I/O using a blkcryptokey has completed, filesystems can call blkcryptoevictkey. However, the block layer currently doesn't call blkcryptoputkeyslot until the...