1 matches found
kernel: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
A use-after-free vulnerability was found in the Linux kernel's seqiv Sequence IV crypto module. After calling cryptoaeadencrypt, the underlying request may be freed by asynchronous completion handlers. The code then incorrectly dereferences req-iv to compare against info, accessing potentially...
7.5CVSS6.2AI score0.00248EPSS
SaveExploits0References5
20