Linux Kernel Vulnerability in Crypto XTS Handling

CVE-2023-53494

What is CVE-2023-53494?

In the Linux kernel's crypto module, a vulnerability related to the handling of special return values in the XTS cipher mode was identified. The XTS handling did not properly manage the EBUSY return value, which could lead to a use-after-free condition if backlogged requests occurred. This oversight could allow attackers to exploit the system, prompting the need for security updates to mitigate potential risks.

References