CVE-2023-54046

HighCVSS 7.8/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: essiv - Handle EBUSY correctly

As it is essiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request.

However, as the caller of essiv may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= be1eb7f78aa8fbe34779c56c266ccd0364604e71, < c61e7d182ee3f3f5ecf18a2964e303d49c539b52; >= be1eb7f78aa8fbe34779c56c266ccd0364604e71, < 796e02cca30a67322161f0745e5ce994bbe75605; >= be1eb7f78aa8fbe34779c56c266ccd0364604e71, < 840a1d3b77c1b062bd62b4733969a5b1efc274ce; >= be1eb7f78aa8fbe34779c56c266ccd0364604e71, < a006aa3eedb8bfd6fe317c3cfe9c86ffe76b2385; >= be1eb7f78aa8fbe34779c56c266ccd0364604e71, < 69c67d451fc19d88e54f7d97e8e7c093e08357e1; >= be1eb7f78aa8fbe34779c56c266ccd0364604e71, < b5a772adf45a32c68bef28e60621f12617161556
LinuxLinux5.4

References

Timeline

Published
Dec 24, 2025
Last modified
Oct 15, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-54047In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: dw_hdmi: cleanup drm encoder during unbind This fixes a CVE-2023-540487.8In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Prevent handling any completions after qp destroy HW mayCVE-2023-54049In the Linux kernel, the following vulnerability has been resolved: rpmsg: glink: Add check for kstrdup Add check for the return value of CVE-2023-54055.9Server information leak for the CDA Server process memory can occur when an error is generated in response to a specially crafted message. SCVE-2023-540507.8In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memleak when insert_old_idx() failed Following process willCVE-2023-54051In the Linux kernel, the following vulnerability has been resolved: net: do not allow gso_size to be set to GSO_BY_FRAGS One missing checkCVE-2023-54052In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU txs may be drCVE-2023-54053In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: fix possible NULL pointer dereference It is possiCVE-2023-54055In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix memory leak of PBLE objects On rmmod of irdma, the PBLCVE-2023-54056In the Linux kernel, the following vulnerability has been resolved: kheaders: Use array declaration instead of char Under CONFIG_FORTIFY_SCVE-2023-54057In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Add a length limitation for the ivrs_acpihid command-line paCVE-2023-54058In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check if ffa_driver remove is present before executi
CVE-2023-54046: High severity, CVSS 7.8 | Vulnix