linux-uconsole/drivers/crypto
Jianglei Nie c93017c8d5 crypto: ccree - Fix use after free in cc_cipher_exit()
[ Upstream commit 3d950c3407 ]

kfree_sensitive(ctx_p->user.key) will free the ctx_p->user.key. But
ctx_p->user.key is still used in the next line, which will lead to a
use after free.

We can call kfree_sensitive() after dev_dbg() to avoid the uaf.

Fixes: 63ee04c8b4 ("crypto: ccree - add skcipher support")
Signed-off-by: Jianglei Nie <niejianglei2021@163.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-04-08 14:40:02 +02:00
..
allwinner crypto: sun8i-ce - call finalize with bh disabled 2022-04-08 14:40:01 +02:00
amcc crypto: crypto4xx - Replace bitwise OR with logical OR in crypto4xx_build_pd 2020-12-30 11:53:17 +01:00
amlogic crypto: amlogic - call finalize with bh disabled 2022-04-08 14:40:01 +02:00
axis
bcm crypto: bcm - Rename struct device_private to bcm_device_private 2021-03-04 11:37:40 +01:00
caam crypto: caam - replace this_cpu_ptr with raw_cpu_ptr 2022-01-27 10:54:24 +01:00
cavium crypto: nitrox - fix unchecked variable in nitrox_register_interrupts 2021-07-14 16:56:06 +02:00
ccp crypto: ccp - ccp_dmaengine_unregister release dma channels 2022-04-08 14:40:02 +02:00
ccree crypto: ccree - Fix use after free in cc_cipher_exit() 2022-04-08 14:40:02 +02:00
chelsio crypto: chelsio - Read rxchannel-id from firmware 2021-05-14 09:50:19 +02:00
hisilicon crypto: hisilicon/sec - fixup 3des minimum key size declaration 2021-07-14 16:55:53 +02:00
inside-secure crypto: inside-secure - Fix sizeof() mismatch 2020-12-30 11:53:00 +01:00
marvell crypto: marvel/cesa - Fix tdma descriptor on 64-bit 2021-02-03 23:28:40 +01:00
mediatek
nx crypto: nx - Fix RCU warning in nx842_OF_upd_status 2021-07-14 16:56:10 +02:00
qat crypto: qat - disable registration of algorithms 2022-03-28 09:57:10 +02:00
qce crypto: qce - fix uaf on qce_skcipher_register_one 2022-01-27 10:53:49 +01:00
rockchip crypto: rockchip - ECB does not need IV 2022-04-08 14:40:00 +02:00
stm32 crypto: stm32/crc32 - Fix kernel BUG triggered in probe() 2022-01-27 10:54:24 +01:00
ux500 crypto: ux500 - Fix error return code in hash_hw_final() 2021-07-14 16:56:03 +02:00
virtio
vmx crypto: vmx - add missing dependencies 2022-04-08 14:40:01 +02:00
xilinx
atmel-aes-regs.h
atmel-aes.c
atmel-authenc.h
atmel-ecc.c
atmel-i2c.c
atmel-i2c.h
atmel-sha-regs.h
atmel-sha.c
atmel-sha204a.c
atmel-tdes-regs.h
atmel-tdes.c
exynos-rng.c
geode-aes.c
geode-aes.h
hifn_795x.c
img-hash.c
ixp4xx_crypto.c crypto: ixp4xx - update IV after requests 2021-07-14 16:56:03 +02:00
Kconfig crypto: omap-sham - Fix link error without crypto-engine 2021-01-27 11:55:06 +01:00
Makefile
mxs-dcp.c crypto: mxs-dcp - Fix scatterlist processing 2022-04-08 14:39:59 +02:00
n2_asm.S
n2_core.c
n2_core.h
omap-aes-gcm.c
omap-aes.c crypto: omap-aes - Fix broken pm_runtime_and_get() usage 2022-01-27 10:54:24 +01:00
omap-aes.h
omap-crypto.c
omap-crypto.h
omap-des.c crypto: omap - Fix inconsistent locking of device lists 2021-09-15 09:50:26 +02:00
omap-sham.c crypto: omap - Fix inconsistent locking of device lists 2021-09-15 09:50:26 +02:00
padlock-aes.c
padlock-sha.c
picoxcell_crypto.c
picoxcell_crypto_regs.h
qcom-rng.c crypto: qcom-rng - ensure buffer for generate is completely filled 2022-03-23 09:13:27 +01:00
s5p-sss.c crypto: s5p-sss - Add error handling in s5p_aes_probe() 2021-11-18 14:03:38 +01:00
sa2ul.c crypto: sa2ul - Fix pm_runtime enable in sa_ul_probe() 2021-07-14 16:56:04 +02:00
sa2ul.h
sahara.c
talitos.c crypto: talitos - Fix ctr(aes) on SEC1 2021-03-04 11:37:45 +01:00
talitos.h crypto: talitos - Work around SEC6 ERRATA (AES-CTR mode data size error) 2021-03-04 11:37:45 +01:00