CVE-2023-53799 in Kernel

Sumário (Inglês)

In the Linux kernel, the following vulnerability has been resolved:

crypto: api - Use work queue in crypto_destroy_instance

The function crypto_drop_spawn expects to be called in process
context. However, when an instance is unregistered while it still
has active users, the last user may cause the instance to be freed
in atomic context.

Fix this by delaying the freeing to a work queue.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Responsável

Linux

Reservar

09/12/2025

Divulgação

09/12/2025

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
335063	Linux Kernel crypto_drop_spawn Elevação de Privilégios		Não definido	Correção oficial	CVE-2023-53799

Fontes

• MITRE
• NVD
• CVE Details