]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
authorHerbert Xu <herbert@gondor.apana.org.au>
Wed, 17 Dec 2025 06:15:41 +0000 (14:15 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 19 Jan 2026 12:09:55 +0000 (13:09 +0100)
commitbaf0e2d1e03ddb04781dfe7f22a654d3611f69b2
tree61f72309256703fa52b5bb7264db1162aabdf12d
parent5bb18bfd505ca1affbca921462c350095a6c798c
crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

[ Upstream commit 50fdb78b7c0bcc550910ef69c0984e751cac72fa ]

As soon as crypto_aead_encrypt is called, the underlying request
may be freed by an asynchronous completion.  Thus dereferencing
req->iv after it returns is invalid.

Instead of checking req->iv against info, create a new variable
unaligned_info and use it for that purpose instead.

Fixes: 0a270321dbf9 ("[CRYPTO] seqiv: Add Sequence Number IV Generator")
Reported-by: Xiumei Mu <xmu@redhat.com>
Reported-by: Xin Long <lucien.xin@gmail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>
crypto/seqiv.c