CVE-2023-54046

In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Handle EBUSY correctly As it is essiv only handles the special return value of EINPROGERSS, which means that in all other cases it will free data related to the request. However, as the caller of essiv may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/69c67d451fc19d88e54f7d97e8e7c093e08357e1
https://git.kernel.org/stable/c/796e02cca30a67322161f0745e5ce994bbe75605
https://git.kernel.org/stable/c/840a1d3b77c1b062bd62b4733969a5b1efc274ce
https://git.kernel.org/stable/c/a006aa3eedb8bfd6fe317c3cfe9c86ffe76b2385
https://git.kernel.org/stable/c/b5a772adf45a32c68bef28e60621f12617161556
https://git.kernel.org/stable/c/c61e7d182ee3f3f5ecf18a2964e303d49c539b52

Configurations

No configuration.

History

No history.

Information

Published : 2025-12-24 13:16

Updated : 2026-08-04 10:19

NVD link : CVE-2023-54046

Mitre link : CVE-2023-54046

CVE.ORG link : CVE-2023-54046

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2023-54046", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "be1eb7f78aa8fbe34779c56c266ccd0364604e71", "lessThan": "c61e7d182ee3f3f5ecf18a2964e303d49c539b52", "versionType": "git"}, {"status": "affected", "version": "be1eb7f78aa8fbe34779c56c266ccd0364604e71", "lessThan": "796e02cca30a67322161f0745e5ce994bbe75605", "versionType": "git"}, {"status": "affected", "version": "be1eb7f78aa8fbe34779c56c266ccd0364604e71", "lessThan": "840a1d3b77c1b062bd62b4733969a5b1efc274ce", "versionType": "git"}, {"status": "affected", "version": "be1eb7f78aa8fbe34779c56c266ccd0364604e71", "lessThan": "a006aa3eedb8bfd6fe317c3cfe9c86ffe76b2385", "versionType": "git"}, {"status": "affected", "version": "be1eb7f78aa8fbe34779c56c266ccd0364604e71", "lessThan": "69c67d451fc19d88e54f7d97e8e7c093e08357e1", "versionType": "git"}, {"status": "affected", "version": "be1eb7f78aa8fbe34779c56c266ccd0364604e71", "lessThan": "b5a772adf45a32c68bef28e60621f12617161556", "versionType": "git"}], "programFiles": ["crypto/essiv.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.4"}, {"status": "unaffected", "version": "0", "lessThan": "5.4", "versionType": "semver"}, {"status": "unaffected", "version": "5.4.235", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.173", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.99", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.16", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.2.3", "versionType": "semver", "lessThanOrEqual": "6.2.*"}, {"status": "unaffected", "version": "6.3", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["crypto/essiv.c"], "defaultStatus": "affected"}]}], "published": "2025-12-24T13:16:06.253", "references": [{"url": "https://git.kernel.org/stable/c/69c67d451fc19d88e54f7d97e8e7c093e08357e1", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/796e02cca30a67322161f0745e5ce994bbe75605", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/840a1d3b77c1b062bd62b4733969a5b1efc274ce", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a006aa3eedb8bfd6fe317c3cfe9c86ffe76b2385", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b5a772adf45a32c68bef28e60621f12617161556", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c61e7d182ee3f3f5ecf18a2964e303d49c539b52", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: essiv - Handle EBUSY correctly\n\nAs it is essiv only handles the special return value of EINPROGERSS,\nwhich means that in all other cases it will free data related to the\nrequest.\n\nHowever, as the caller of essiv may specify MAY_BACKLOG, we also need\nto expect EBUSY and treat it in the same way. Otherwise backlogged\nrequests will trigger a use-after-free."}], "lastModified": "2026-08-04T10:19:26.320", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}