]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
authorHerbert Xu <herbert@gondor.apana.org.au>
Wed, 17 Dec 2025 06:15:41 +0000 (14:15 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 8 Jan 2026 09:16:43 +0000 (10:16 +0100)
commit5476f7f8a311236604b78fcc5b2a63b3a61b0169
tree7c085fcaa0943c15de5cfc4c613bd25edf7310f3
parent5d8b9d38a7676be7bb5e7d57f92156a98dab39fb
crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

[ Upstream commit 50fdb78b7c0bcc550910ef69c0984e751cac72fa ]

As soon as crypto_aead_encrypt is called, the underlying request
may be freed by an asynchronous completion.  Thus dereferencing
req->iv after it returns is invalid.

Instead of checking req->iv against info, create a new variable
unaligned_info and use it for that purpose instead.

Fixes: 0a270321dbf9 ("[CRYPTO] seqiv: Add Sequence Number IV Generator")
Reported-by: Xiumei Mu <xmu@redhat.com>
Reported-by: Xin Long <lucien.xin@gmail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>
crypto/seqiv.c