Executive Summary

This vulnerability occurs in the Linux kernel's crypto subsystem, specifically in the hisilicon/sec2 driver. During packet transmission under heavy system load, the hardware may finish processing a packet and free the associated request memory (req) before the transmission function completes. If the software then tries to access this freed req memory, a use-after-free error happens. To fix this, the vulnerable code replaces the req pointer with qp_ctx memory, which remains valid throughout the packet sending process.

Useful 0 Not Useful 0

Impact Analysis

The use-after-free vulnerability can lead to undefined behavior such as system crashes, data corruption, or potential escalation of privileges if exploited. Since it involves accessing freed memory during packet transmission, it could destabilize the system or cause security issues in environments relying on the affected crypto driver.

Useful 0 Not Useful 0