PT-2026-64526 · Linux · Linux
CVE-2026-64305
·
Published
2026-07-25
·
Updated
2026-07-25
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
crypto: qat - protect service table iterations with service lock
The service table list is protected by service lock when entries are
added or removed (in adf service add() and adf service remove()), but
several functions iterate over the list without holding this lock.
A concurrent adf service register() or adf service unregister() call
could modify the list during traversal, leading to list corruption or
a use-after-free.
Fix this by holding service lock across all list for each entry()
iterations of service table in adf dev init(), adf dev start(),
adf dev stop(), adf dev shutdown(), adf dev restarting notify(),
adf dev restarted notify(), and adf error notifier().
The lock ordering is safe: callers of the static helpers (adf dev up()
and adf dev down()) acquire state lock before service lock, and no
event hld callback or service lock holder ever acquires state lock in
the reverse order.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux