CVE-2023-53799

crypto: api - Use work queue in crypto_destroy_instance

N/A

Published: December 9, 2025 at 12:00 AM UTC

Updated: June 17, 2026 at 06:46 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: api - Use work queue in crypto_destroy_instance The function crypto_drop_spawn expects to be called in process context. However, when an instance is unregistered while it still has active users, the last user may cause the instance to be freed in atomic context. Fix this by delaying the freeing to a work queue.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

2.6.19 ≤ v < 5.10.1952.6.19 ≤ v < 5.15.1322.6.19 ≤ v < 6.1.532.6.19 ≤ v < 6.4.162.6.19 ≤ v < 6.5.32.6.19 ≤ v < 6.62.6.196bfd48096ff8ecabf955958b51ddfa7988eb0a14

Vendor states this is fixed in 048545d9fc6424b0a11e7e8771225bb9afe09422 (fixed)

Vendor states this is fixed in 625bf86bf53eb7a8ee60fb9dc45b272b77e5ce1c (fixed)

Vendor states this is fixed in 867a146690960ac7b89ce40f4ee60dd32eeb1682 (fixed)

Vendor states this is fixed in 9ae4577bc077a7e32c3c7d442c95bc76865c0f17 (fixed)

Vendor states this is fixed in c0dbcebc7f390ec7dbe010dcc22c60f0c6bfc26d (fixed)

Vendor states this is fixed in c4cb61c5f976183c07d16b0071f0c60bc212ef1f (fixed)

Vendor states this is fixed in 2.6.19 (unaffected)

Vendor states this is fixed in 5.10.195 (unaffected)

Vendor states this is fixed in 5.15.132 (unaffected)

Vendor states this is fixed in 6.1.53 (unaffected)

Vendor states this is fixed in 6.4.16 (unaffected)

Vendor states this is fixed in 6.5.3 (unaffected)