Ivan Pravdin 2f45a8d64f crypto: algif_hash - fix double free in hash_accept ...

commit b2df03ed40 upstream.

If accept(2) is called on socket type algif_hash with
MSG_MORE flag set and crypto_ahash_import fails,
sk2 is freed. However, it is also freed in af_alg_release,
leading to slab-use-after-free error.

Fixes: fe869cdb89 ("crypto: algif_hash - User-space interface for hash operations")
Cc: <stable@vger.kernel.org>
Signed-off-by: Ivan Pravdin <ipravdin.official@gmail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-05-29 11:03:18 +02:00

..

asymmetric_keys

KEYS: prevent NULL pointer dereference in find_asymmetric_key()

2024-09-20 19:49:49 +03:00

async_tx

…

842.c

…

acompress.c

crypto: remove CONFIG_CRYPTO_STATS

2024-04-02 10:49:38 +08:00

adiantum.c

…

aead.c

crypto: aead,cipher - zeroize key buffer after use

2024-04-26 17:26:09 +08:00

aegis128-core.c

crypto: aegis128 - Fix indentation issue in crypto_aegis128_process_crypt()

2024-09-13 18:26:52 +08:00

aegis128-neon-inner.c

…

aegis128-neon.c

…

aegis-neon.h

…

aegis.h

…

aes_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

aes_ti.c

…

af_alg.c

crypto: Add missing MODULE_DESCRIPTION() macros

2024-05-31 17:34:56 +08:00

ahash.c

crypto: ahash - Set default reqsize from ahash_alg

2025-05-29 11:02:40 +02:00

akcipher.c

crypto: remove CONFIG_CRYPTO_STATS

2024-04-02 10:49:38 +08:00

algapi.c

crypto: api - Fix boot-up self-test race

2025-02-08 09:57:28 +01:00

algboss.c

crypto: algboss - Pass instance creation error up

2024-09-06 14:50:46 +08:00

algif_aead.c

…

algif_hash.c

crypto: algif_hash - fix double free in hash_accept

2025-05-29 11:03:18 +02:00

algif_rng.c

…

algif_skcipher.c

crypto: Add missing MODULE_DESCRIPTION() macros

2024-05-31 17:34:56 +08:00

ansi_cprng.c

…

anubis.c

…

api.c

crypto: api - Fix larval relookup type and mask

2025-04-10 14:39:20 +02:00

arc4.c

crypto: arc4 - Add internal state

2023-12-08 11:59:46 +08:00

aria_generic.c

…

authenc.c

…

authencesn.c

…

blake2b_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

blowfish_common.c

…

blowfish_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

bpf_crypto_skcipher.c

crypto: bpf - Add MODULE_DESCRIPTION for skcipher

2025-04-10 14:39:17 +02:00

camellia_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

cast5_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

cast6_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

cast_common.c

crypto: Add missing MODULE_DESCRIPTION() macros

2024-05-31 17:34:56 +08:00

cbc.c

crypto: cbc - Ensure statesize is zero

2024-02-02 18:08:12 +08:00

ccm.c

…

chacha20poly1305.c

crypto: chacha20poly1305 - Annotate struct chachapoly_ctx with __counted_by()

2024-08-17 13:55:49 +08:00

chacha_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

cipher.c

crypto: aead,cipher - zeroize key buffer after use

2024-04-26 17:26:09 +08:00

cmac.c

…

compress.c

…

compress.h

crypto: remove CONFIG_CRYPTO_STATS

2024-04-02 10:49:38 +08:00

crc32_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

crc32c_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

crc64_rocksoft_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

crct10dif_common.c

…

crct10dif_generic.c

…

cryptd.c

…

crypto_engine.c

…

crypto_null.c

crypto: null - Use spin lock instead of mutex

2025-05-02 07:59:15 +02:00

crypto_user.c

crypto: remove CONFIG_CRYPTO_STATS

2024-04-02 10:49:38 +08:00

ctr.c

…

cts.c

…

curve25519-generic.c

crypto: Add missing MODULE_DESCRIPTION() macros

2024-05-31 17:34:56 +08:00

deflate.c

crypto: deflate - Add aliases to deflate

2024-06-28 11:35:47 +10:00

des_generic.c

…

dh_helper.c

…

dh.c

crypto: dh - Check mpi_rshift errors

2024-08-17 13:55:50 +08:00

drbg.c

crypto: drbg - Remove SHA1 from drbg

2023-11-17 19:16:29 +08:00

ecb.c

crypto: skcipher - Add internal state support

2023-12-08 11:59:46 +08:00

ecc_curve_defs.h

crypto: ecc - Add NIST P521 curve parameters

2024-04-12 15:07:52 +08:00

ecc.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

ecdh_helper.c

…

ecdh.c

crypto: ecdh - Initialize ctx->private_key in proper byte order

2024-04-26 17:26:09 +08:00

ecdsa.c

crypto: ecdsa - Avoid signed integer overflow on signature decoding

2024-12-14 20:03:36 +01:00

ecdsasignature.asn1

…

echainiv.c

…

ecrdsa_defs.h

crypto: ecc - Add nbits field to ecc_curve structure

2024-04-12 15:07:52 +08:00

ecrdsa_params.asn1

…

ecrdsa_pub_key.asn1

…

ecrdsa.c

crypto: ecrdsa - Fix module auto-load on add_key

2024-04-02 10:49:38 +08:00

essiv.c

…

fcrypt.c

…

fips.c

crypto: fips - Remove the now superfluous sentinel element from ctl_table array

2024-04-05 15:46:33 +08:00

gcm.c

…

geniv.c

…

ghash-generic.c

…

hash_info.c

…

hash.h

crypto: remove CONFIG_CRYPTO_STATS

2024-04-02 10:49:38 +08:00

hctr2.c

…

hmac.c

…

internal.h

crypto: api - Do not wait for tests during registration

2024-08-24 21:39:15 +08:00

jitterentropy-kcapi.c

crypto: jitter - Use kvfree_sensitive() to fix Coccinelle warning

2024-04-05 15:46:33 +08:00

jitterentropy-testing.c

…

jitterentropy.c

crypto: jitter - Use min() to simplify jent_read_entropy()

2024-08-30 18:22:30 +08:00

jitterentropy.h

…

Kconfig

crypto: Kconfig - Select LIB generic option

2025-05-02 07:59:33 +02:00

kdf_sp800108.c

…

keywrap.c

…

khazad.c

…

kpp.c

crypto: remove CONFIG_CRYPTO_STATS

2024-04-02 10:49:38 +08:00

lrw.c

…

lskcipher.c

crypto: remove CONFIG_CRYPTO_STATS

2024-04-02 10:49:38 +08:00

lz4.c

…

lz4hc.c

…

lzo-rle.c

crypto: lzo - Fix compression buffer overrun

2025-05-29 11:02:25 +02:00

lzo.c

crypto: lzo - Fix compression buffer overrun

2025-05-29 11:02:25 +02:00

Makefile

crypto: sm2 - Remove sm2 algorithm

2024-06-07 19:46:39 +08:00

md4.c

…

md5.c

…

michael_mic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

nhpoly1305.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

pcbc.c

crypto: pcbc - remove redundant assignment to nbytes

2024-01-26 16:39:32 +08:00

pcrypt.c

crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY

2024-12-05 14:01:18 +01:00

poly1305_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

polyval-generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

proc.c

…

ripemd.h

…

rmd160.c

…

rng.c

crypto: remove CONFIG_CRYPTO_STATS

2024-04-02 10:49:38 +08:00

rsa_helper.c

…

rsa-pkcs1pad.c

…

rsa.c

crypto: rsa - Check MPI allocation errors

2024-08-17 13:55:50 +08:00

rsaprivkey.asn1

…

rsapubkey.asn1

…

scatterwalk.c

…

scompress.c

crypto: remove CONFIG_CRYPTO_STATS

2024-04-02 10:49:38 +08:00

seed.c

…

seqiv.c

…

serpent_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

sha1_generic.c

…

sha3_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

sha256_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

sha512_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

shash.c

crypto: remove CONFIG_CRYPTO_STATS

2024-04-02 10:49:38 +08:00

sig.c

crypto: remove CONFIG_CRYPTO_STATS

2024-04-02 10:49:38 +08:00

simd.c

crypto: simd - Do not call crypto_alloc_tfm during registration

2024-08-24 21:39:15 +08:00

skcipher.c

crypto: skcipher - Zap type in crypto_alloc_sync_skcipher

2025-05-29 11:02:40 +02:00

skcipher.h

crypto: remove CONFIG_CRYPTO_STATS

2024-04-02 10:49:38 +08:00

sm3_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

sm3.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

sm4_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

sm4.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

streebog_generic.c

…

tcrypt.c

crypto: tcrypt - add skcipher speed for given alg

2024-06-28 11:35:46 +10:00

tcrypt.h

…

tea.c

…

testmgr.c

crypto: testmgr - Hide ENOENT errors better

2024-10-10 17:03:35 +08:00

testmgr.h

crypto: sm2 - Remove sm2 algorithm

2024-06-07 19:46:39 +08:00

twofish_common.c

…

twofish_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

vmac.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

wp512.c

…

xcbc.c

…

xctr.c

…

xor.c

crypto: xor - fix template benchmarking

2024-08-02 20:53:25 +08:00

xts.c

…

xxhash_generic.c

move asm/unaligned.h to linux/unaligned.h

2024-10-02 17:23:23 -04:00

zstd.c

…