Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: pcrypt - restore callback for non-parallel fallback
pcrypt installs pcrypt_aead_done() on the child AEAD request before trying to submit it through padata. If padata_do_parallel() returns -EBUSY, pcrypt falls back to calling the child AEAD directly.
That fallback must not keep the padata completion callback. Otherwise an asynchronous completion runs pcrypt_aead_done() even though the request was never enrolled in padata.
Restore the original request callback and callback data before calling the child AEAD directly. This keeps the fallback path aligned with a direct AEAD request while leaving the parallel path unchanged.
Metrics
CVSS 3.1 7.5/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= a92ccd3618e42333ac6f150ecdac14dca298bc7a, < 81ce16d938db9b88cdc231522c0358395ae8c6b5; >= 96001f52ae8c70e2c736d3e1e5dc53d5b521e5ca, < 3920c5f6edc341729d20d0507e466c6d3b11f372; >= 92834692a539b5b7f409e467a14667d64713b732, < ae93c5b3e2a2968b56d772ca1d06615927b7cc36; >= 5edae7a9a35606017ee6e05911c290acee9fee5a, < 82789a44415e3e31168229421b138278dfb16412; >= 7ddab756f2de5b7b43c122ebebdf37f400fb2b6f, < 4711ca06bd169a2cbc9cc59a6de2ed512c41a880; >= 662f2f13e66d3883b9238b0b96b17886179e60e2, < c4bd2f4c35b0e15b6040c2f7e7e7986780c066cf; >= 662f2f13e66d3883b9238b0b96b17886179e60e2, < 83fa1397d5853de1e27dd52ec44b068ff358ca18; >= 662f2f13e66d3883b9238b0b96b17886179e60e2, < ed459fe319376e876de433d12b6c6772e612ca36; dd8bf8eb5beba1e7c3b11a9a5a58ccbf345a69e6; fca8aed12218f96b38e374ff264d78ea1fbd23cc; a8e0074ffb38c9a5964a221bb998034d016c93a2; >= 5.10.231, < 5.10.261; >= 5.15.174, < 5.15.212; >= 6.1.120, < 6.1.178; >= 6.6.64, < 6.6.145; >= 6.12.2, < 6.12.96; >= 4.19.325, < 4.20; >= 5.4.287, < 5.5; >= 6.11.11, < 6.12 |
| Linux | Linux | 6.13 |
References
- https://git.kernel.org/stable/c/3920c5f6edc341729d20d0507e466c6d3b11f372Patch
- https://git.kernel.org/stable/c/4711ca06bd169a2cbc9cc59a6de2ed512c41a880Patch
- https://git.kernel.org/stable/c/81ce16d938db9b88cdc231522c0358395ae8c6b5Patch
- https://git.kernel.org/stable/c/82789a44415e3e31168229421b138278dfb16412Patch
- https://git.kernel.org/stable/c/83fa1397d5853de1e27dd52ec44b068ff358ca18Patch
- https://git.kernel.org/stable/c/ae93c5b3e2a2968b56d772ca1d06615927b7cc36Patch
- https://git.kernel.org/stable/c/c4bd2f4c35b0e15b6040c2f7e7e7986780c066cfPatch
- https://git.kernel.org/stable/c/ed459fe319376e876de433d12b6c6772e612ca36Patch
Timeline
- Published
- Jul 25, 2026
- Last modified
- Oct 24, 2026
- NVD status
- Modified