]> git.ipfire.org Git - thirdparty/linux.git/commit
crypto: hisilicon/sec2 - prevent req used-after-free for sec
authorWenkai Lin <linwenkai6@hisilicon.com>
Sat, 21 Mar 2026 07:00:38 +0000 (15:00 +0800)
committerHerbert Xu <herbert@gondor.apana.org.au>
Fri, 27 Mar 2026 09:52:44 +0000 (18:52 +0900)
commit67b53a660e6bf0da2fa8d8872e897a14d8059eaf
tree1461c9296eaf8a1166fe293a8f4b70beded4cde8
parent07fa25957a18cff13f1943ecd213c88c0878b968
crypto: hisilicon/sec2 - prevent req used-after-free for sec

During packet transmission, if the system is under heavy load,
the hardware might complete processing the packet and free the
request memory (req) before the transmission function finishes.
If the software subsequently accesses this req, a use-after-free
error will occur. The qp_ctx memory exists throughout the packet
sending process, so replace the req with the qp_ctx.

Fixes: f0ae287c5045 ("crypto: hisilicon/sec2 - implement full backlog mode for sec")
Signed-off-by: Wenkai Lin <linwenkai6@hisilicon.com>
Signed-off-by: Chenghai Huang <huangchenghai2@huawei.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
drivers/crypto/hisilicon/sec2/sec_crypto.c