REDHAT-BUG-2348600: Medium severity linux_kernel vulnerability
In the Linux kernel, the following vulnerability has been resolved:
padata: avoid UAF for reorderwork
Although the previous patch can avoid ps and ps UAF for doserial, it can not avoid potential UAF issue for reorderwork. This issue can happen just as below:
cryptorequest cryptorequest cryptodelalg padatadoserial ... padatareorder // processes all remaining // requests then breaks while (1) { if (!padata) break; ... }
padatadoserial // new request added listadd // sees the new request queuework(reorderwork) padatareorder queueworkon(squeue->work) ...
<kworker context> padataserialworker // completes new request, // no more outstanding // requests
cryptodelalg // free pd
<kworker context> invokepadatareorder // UAF of pd
To avoid UAF for 'reorderwork', get 'pd' ref before put 'reorderwork' into the 'serialwq' and put 'pd' ref until the 'serialwq' finish.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2348600?
The severity of REDHAT-BUG-2348600 is rated as medium (4).
How do I fix REDHAT-BUG-2348600?
To fix REDHAT-BUG-2348600, ensure that you apply the latest updates and patches provided for the Linux kernel.
What type of vulnerability is REDHAT-BUG-2348600?
REDHAT-BUG-2348600 is a use-after-free (UAF) vulnerability related to the padata subsystem in the Linux kernel.
What software is affected by REDHAT-BUG-2348600?
REDHAT-BUG-2348600 affects the Linux kernel software.
When was REDHAT-BUG-2348600 published?
REDHAT-BUG-2348600 was published on February 27, 2025.