PT-2026-64526 · Linux · Linux

CVE-2026-64305 · Publicado 2026-07-25 · Atualizado 2026-07-25

NVD

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - protect service table iterations with service lock

The service table list is protected by service lock when entries are added or removed (in adf service add() and adf service remove()), but several functions iterate over the list without holding this lock.

A concurrent adf service register() or adf service unregister() call could modify the list during traversal, leading to list corruption or a use-after-free.

Fix this by holding service lock across all list for each entry() iterations of service table in adf dev init(), adf dev start(), adf dev stop(), adf dev shutdown(), adf dev restarting notify(), adf dev restarted notify(), and adf error notifier().

The lock ordering is safe: callers of the static helpers (adf dev up() and adf dev down()) acquire state lock before service lock, and no event hld callback or service lock holder ever acquires state lock in the reverse order.

Identificadores relacionados

CVE-2026-64305

Produtos afetados

Linux

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-64305 · Nota de Segurança
• https://git.kernel.org/stable/c/222fa7b453b612f4407f260146d89a2ce2bc831d · Nota
• https://git.kernel.org/stable/c/5c6f845e77ec35f9b7b047cc8f9789bf397cdd3e · Nota
• https://git.kernel.org/stable/c/0dbcecea740d943002c1cbdafa39bdfc108e32a5 · Nota
• https://git.kernel.org/stable/c/c3c5925791cff3b84d313293fd60f384d877d793 · Nota