linux-stable/drivers/crypto
Herbert Xu e7428e7e3f crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
commit d3b17c6d9d upstream.

Using completion_done to determine whether the caller has gone
away only works after a complete call.  Furthermore it's still
possible that the caller has not yet called wait_for_completion,
resulting in another potential UAF.

Fix this by making the caller use cancel_work_sync and then freeing
the memory safely.

Fixes: 7d42e09760 ("crypto: qat - resolve race condition during AER recovery")
Cc: <stable@vger.kernel.org> #6.8+
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Reviewed-by: Giovanni Cabiddu <giovanni.cabiddu@intel.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-06-16 13:41:38 +02:00
..
allwinner crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() 2023-05-17 11:53:40 +02:00
amcc crypto: crypto4xx - Call dma_unmap_page when done 2023-03-10 09:33:04 +01:00
amlogic crypto: amlogic - Remove kcalloc without check 2022-12-31 13:32:36 +01:00
aspeed crypto: aspeed - Remove redundant dev_err call 2022-09-30 13:59:13 +08:00
axis crypto: artpec6 - Fix printk warning on size_t/%d 2022-09-24 16:14:43 +08:00
bcm crypto: bcm - Fix pointer arithmetic 2024-06-12 11:03:04 +02:00
caam crypto: caam/jr - fix Chacha20 + Poly1305 self test failure 2023-11-20 11:52:05 +01:00
cavium crypto: nitrox - avoid double free on error path in nitrox_sriov_init() 2022-12-31 13:32:30 +01:00
ccp crypto: ccp - drop platform ifdef checks 2024-06-12 11:03:04 +02:00
ccree crypto: ccree - Make cc_debugfs_global_fini() available for module init function 2022-12-31 13:32:33 +01:00
chelsio
gemini Revert "crypto: gemini - Fix error check for dma_map_sg" 2022-09-02 18:15:53 +08:00
hisilicon crypto: hisilicon/zip - save capability registers in probe process 2024-01-25 15:27:22 -08:00
inside-secure crypto: safexcel - Add error handling for dma_map_sg() calls 2024-01-25 15:27:21 -08:00
keembay crypto: keembay-ocs - Drop obsolete dependency on COMPILE_TEST 2022-08-19 18:39:36 +08:00
marvell crypto: octeontx2 - Fix cptvf driver cleanup 2024-02-05 20:12:48 +00:00
nx crypto: nx - fix build warnings when DEBUG_FS is not enabled 2023-07-19 16:21:41 +02:00
qat crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak 2024-06-16 13:41:38 +02:00
qce crypto: qce - Fix dma_map_sg error check 2022-08-26 18:50:39 +08:00
rockchip crypto: rockchip - rework by using crypto_engine 2022-12-31 13:32:31 +01:00
stm32 crypto: stm32/crc32 - fix parsing list of devices 2024-02-05 20:12:48 +00:00
ux500
virtio crypto: virtio/akcipher - Fix stack overflow on memcpy 2024-03-01 13:26:32 +01:00
vmx
xilinx crypto: xilinx - call finalize with bh disabled 2024-03-26 18:20:47 -04:00
Kconfig crypto: sa2ul - Select CRYPTO_DES 2023-05-11 23:03:20 +09:00
Makefile crypto: aspeed - Add HACE hash driver 2022-08-26 18:50:37 +08:00
atmel-aes-regs.h
atmel-aes.c
atmel-authenc.h
atmel-ecc.c
atmel-i2c.c
atmel-i2c.h
atmel-sha-regs.h
atmel-sha.c
atmel-sha204a.c
atmel-tdes-regs.h
atmel-tdes.c
exynos-rng.c
geode-aes.c
geode-aes.h
hifn_795x.c
img-hash.c crypto: img-hash - Fix variable dereferenced before check 'hdev->req' 2022-12-31 13:32:37 +01:00
ixp4xx_crypto.c
mxs-dcp.c
n2_asm.S
n2_core.c crypto: n2 - add missing hash statesize 2023-01-07 11:11:54 +01:00
n2_core.h
omap-aes-gcm.c
omap-aes.c
omap-aes.h
omap-crypto.c
omap-crypto.h
omap-des.c
omap-sham.c crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() 2022-12-31 13:32:36 +01:00
padlock-aes.c
padlock-sha.c
qcom-rng.c
s5p-sss.c
sa2ul.c crypto: sa2ul - Return crypto_aead_setkey to transfer the error 2024-01-25 15:27:21 -08:00
sa2ul.h
sahara.c crypto: sahara - do not resize req->src when doing hash operations 2024-01-25 15:27:23 -08:00
talitos.c
talitos.h