{"id":"CVE-2023-54046","revision":"79bb753208eb402ab70e67bffdc32c99","records":[{"revision":"79bb753208eb402ab70e67bffdc32c99","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2023-54046","aliases":[],"title":"crypto: essiv - Handle EBUSY correctly","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: essiv - Handle EBUSY correctly\n\nAs it is essiv only handles the special return value of EINPROGERSS,\nwhich means that in all other cases it will free data related to the\nrequest.\n\nHowever, as the caller of essiv may specify MAY_BACKLOG, we also need\nto expect EBUSY and treat it in the same way.  Otherwise backlogged\nrequests will trigger a use-after-free.","state":0,"publishedAt":"2025-12-24T12:22:57.416+00:00","modifiedAt":"2026-10-15T21:41:38.544+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"crypto/essiv.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"be1eb7f78aa8fbe34779c56c266ccd0364604e71\",\n                            \"lessThan\": \"c61e7d182ee3f3f5ecf18a2964e303d49c539b52\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"be1eb7f78aa8fbe34779c56c266ccd0364604e71\",\n                            \"lessThan\": \"796e02cca30a67322161f0745e5ce994bbe75605\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"be1eb7f78aa8fbe34779c56c266ccd0364604e71\",\n                            \"lessThan\": \"840a1d3b77c1b062bd62b4733969a5b1efc274ce\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"be1eb7f78aa8fbe34779c56c266ccd0364604e71\",\n                            \"lessThan\": \"a006aa3eedb8bfd6fe317c3cfe9c86ffe76b2385\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"be1eb7f78aa8fbe34779c56c266ccd0364604e71\",\n                            \"lessThan\": \"69c67d451fc19d88e54f7d97e8e7c093e08357e1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"be1eb7f78aa8fbe34779c56c266ccd0364604e71\",\n                            \"lessThan\": \"b5a772adf45a32c68bef28e60621f12617161556\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"crypto/essiv.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.4\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.235\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.173\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.99\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.16\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.2.3\",\n                            \"lessThanOrEqual\": \"6.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/c61e7d182ee3f3f5ecf18a2964e303d49c539b52","https://git.kernel.org/stable/c/796e02cca30a67322161f0745e5ce994bbe75605","https://git.kernel.org/stable/c/840a1d3b77c1b062bd62b4733969a5b1efc274ce","https://git.kernel.org/stable/c/a006aa3eedb8bfd6fe317c3cfe9c86ffe76b2385","https://git.kernel.org/stable/c/69c67d451fc19d88e54f7d97e8e7c093e08357e1","https://git.kernel.org/stable/c/b5a772adf45a32c68bef28e60621f12617161556"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-54046","license":"CVE Program Terms of Use","key":"cve-program:CVE-2023-54046","identifiers":["CVE-2023-54046"]},"retained":false,"historicalAffected":[]}],"coverage":[]}