Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: seqiv - Handle EBUSY correctly
As it is seqiv only handles the special return value of EINPROGERSS,
which means that in all other cases it will free data related to the
request.
However, as the caller of seqiv may specify MAY_BACKLOG, we also need
to expect EBUSY and treat it in the same way. Otherwise backlogged
requests will trigger a use-after-free.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 2.6.25 | 4.14.308 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.1.20-1 | — |
| Debian 13 | linux | 6.1.20-1 | — |
| Debian 12 | linux | 6.1.20-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1019.21 | — |
| Ubuntu 24.04 LTS | linux-intel +9 | No fix yet | — |
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-75.82 | — |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1038.43 | — |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1040.47 | — |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1041.48.1 | — |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1036.44 | — |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1036.41 | — |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1022.27 | — |
| Ubuntu 22.04 LTS | linux-ibm +1 | 5.15.0-1032.35 | — |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1033.38 | — |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1035.40 | — |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1027.27 | — |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1015.15 | — |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1037.43 | — |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 20.04 LTS | linux | 5.4.0-152.169 | — |
| Ubuntu 20.04 LTS | linux-aws | 5.4.0-1104.112 | — |
| Ubuntu 20.04 LTS | linux-aws-5.15 | 5.15.0-1038.43~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-azure | 5.4.0-1110.116 | — |
| Ubuntu 20.04 LTS | linux-azure-5.15 | 5.15.0-1040.47~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-bluefield | 5.4.0-1065.71 | — |
| Ubuntu 20.04 LTS | linux-gcp | 5.4.0-1107.116 | — |
| Ubuntu 20.04 LTS | linux-gcp-5.15 | 5.15.0-1036.44~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-75.82~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-ibm | 5.4.0-1051.56 | — |
| Ubuntu 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1033.38~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-iot | 5.4.0-1017.18 | — |
| Ubuntu 20.04 LTS | linux-kvm | 5.4.0-1093.99 | — |
| Ubuntu 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1015.15~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-oracle | 5.4.0-1103.112 | — |
| Ubuntu 20.04 LTS | linux-oracle-5.15 | 5.15.0-1037.43~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-raspi | 5.4.0-1088.99 | — |
| Ubuntu 20.04 LTS | linux-riscv-5.15 | 5.15.0-1035.39~20.04.1 | — |
| Ubuntu 20.04 LTS | linux-xilinx-zynqmp | 5.4.0-1024.28 | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1033.35 | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1040.45 | — |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1073.79+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1078.87+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-127.137+fips1 | — |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1072.80+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | 5.4.0-1104.112+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | 5.4.0-1110.116+fips1 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | 5.4.0-1079.88 | — |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | 5.4.0-1107.116+fips1 | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | linux +5 | No fix yet | — |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 | 5.4.0-1104.112~18.04.1 | — |
| Ubuntu Pro 18.04 LTS | linux-azure-5.4 | 5.4.0-1110.116~18.04.1 | — |
| Ubuntu Pro 18.04 LTS | linux-gcp-5.4 | 5.4.0-1107.116~18.04.1 | — |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | 5.4.0-152.169~18.04.1 | — |
| Ubuntu Pro 18.04 LTS | linux-ibm-5.4 | 5.4.0-1051.56~18.04.1 | — |
| Ubuntu Pro 18.04 LTS | linux-oracle-5.4 | 5.4.0-1103.112~18.04.1 | — |
| Ubuntu Pro 18.04 LTS | linux-raspi-5.4 | 5.4.0-1088.99~18.04.1 | — |
| Ubuntu Pro 16.04 LTS | linux +7 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | linux +3 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | rv +77 | 5.14.0-570.52.1.el9_6 | RHSA-2025:21112, RHSA-2025:17760 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.80.1.rt7.421.el8_10 | RHSA-2025:18298 |
| RHEL 8 | perf +26 | 4.18.0-553.80.1.el8_10 | RHSA-2025:18297 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Rt Els 7 | kernel-rt +7 | 3.10.0-1160.142.1.rt56.1294.el7 | RHSA-2025:21082 |
| RHEL 9.4 EUS | bpftool | 7.3.0-427.96.1.el9_4 | RHSA-2025:19104 |
| RHEL 9.4 EUS | rv +64 | 5.14.0-427.96.1.el9_4 | RHSA-2025:19104 |
| RHEL 9.2 E4S | bpftool | 7.0.0-284.146.1.el9_2 | RHSA-2025:21051 |
| RHEL 9.2 E4S | kernel-rt +14 | 5.14.0-284.146.1.rt14.431.el9_2 | RHSA-2025:21128 |
| RHEL 9.2 E4S | perf +47 | 5.14.0-284.146.1.el9_2 | RHSA-2025:21051 |
| RHEL 9.0 E4S | kernel-rt +12 | 5.14.0-70.151.1.rt21.223.el9_0 | RHSA-2025:19268 |
| RHEL 9.0 E4S | perf +28 | 5.14.0-70.151.1.el9_0 | RHSA-2025:19492 |
| RHEL 8.8 TUS | perf +17 | 4.18.0-477.118.1.el8_8 | RHSA-2025:21083 |
| RHEL 8.8 E4S | perf +18 | 4.18.0-477.118.1.el8_8 | RHSA-2025:21083 |
| RHEL 8.6 TUS | perf +17 | 4.18.0-372.168.1.el8_6 | RHSA-2025:21084 |
| RHEL 8.6 E4S | perf +25 | 4.18.0-372.168.1.el8_6 | RHSA-2025:21084 |
| RHEL 8.6 AUS | perf +17 | 4.18.0-372.168.1.el8_6 | RHSA-2025:21084 |
| RHEL 8.4 EUS Long Life | perf +17 | 4.18.0-305.179.1.el8_4 | RHSA-2025:22752 |
| RHEL 8.4 AUS | perf +17 | 4.18.0-305.179.1.el8_4 | RHSA-2025:22752 |
| RHEL 8.2 AUS | perf +17 | 4.18.0-193.178.1.el8_2 | RHSA-2025:23445 |
| RHEL 7 ELS | perf +18 | 3.10.0-1160.142.1.el7 | RHSA-2025:21063 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | rv +75 | 5.14.0-570.52.1.el9_6 | ALSA-2025:17760 |
| AlmaLinux 8 | kernel-rt +9 | 4.18.0-553.80.1.rt7.421.el8_10 | ALSA-2025:18298 |
| AlmaLinux 8 | perf +24 | 4.18.0-553.80.1.el8_10 | ALSA-2025:18297 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | kernel | 5.14.0-570.52.1.el9_6 | RLSA-2025:17760 |
| Rocky Linux 8 | kernel | 4.18.0-553.80.1.el8_10 | RLSA-2025:18297 |
| Rocky Linux 8 | kernel-rt | 4.18.0-553.80.1.rt7.421.el8_10 | RLSA-2025:18298 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | kernel-64kb +6 | 5.14.21-150500.55.124.1 | SUSE-SU-2025:03615-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.124.1.150500.6.59.1 | SUSE-SU-2025:03615-1 |
| SLES 15 SP4 | kernel-64kb +6 | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SLES 12 SP5 | kernel-syms +2 | 4.12.14-122.280.1 | SUSE-SU-2025:4189-1 |
Show 12 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP5 | kernel-default-base | 5.14.21-150500.55.124.1.150500.6.59.1 | SUSE-SU-2025:03615-1 |
| SLES for SAP 15 SP5 | kernel-docs +4 | 5.14.21-150500.55.124.1 | SUSE-SU-2025:03615-1 |
| SLES for SAP 15 SP4 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SLES for SAP 15 SP4 | kernel-docs +4 | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.124.1.150500.6.59.1 | SUSE-SU-2025:03615-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.109.1 | SUSE-SU-2025:3761-1 |
| SLE Micro 5.5 | kernel-source +1 | 5.14.21-150500.55.124.1 | SUSE-SU-2025:03615-1 |
| SLE Micro 5.4 | kernel-default | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLE Micro 5.4 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SLE Micro 5.4 | kernel-rt +1 | 5.14.21-150400.15.133.1 | SUSE-SU-2025:3716-1 |
| SLE Micro 5.3 | kernel-default | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLE Micro 5.3 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SLE Micro 5.3 | kernel-rt +1 | 5.14.21-150400.15.133.1 | SUSE-SU-2025:3716-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.124.1 | SUSE-SU-2025:03615-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_31 | 1-150500.11.3.1 | SUSE-SU-2025:03615-1 |
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_45 | 1-150400.9.3.1 | SUSE-SU-2025:03628-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.280.1 | SUSE-SU-2025:4189-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_74 | 1-8.5.1 | SUSE-SU-2025:4189-1 |
| SLE HPC 15 SP5 | kernel-64kb +5 | 5.14.21-150500.55.124.1 | SUSE-SU-2025:03615-1 |
| SLE HPC 15 SP5 | kernel-default-base | 5.14.21-150500.55.124.1.150500.6.59.1 | SUSE-SU-2025:03615-1 |
| SLE HPC 15 SP4 | kernel-64kb +5 | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SLE HPC 15 SP4 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SUSE Manager Server LTS 4.3 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SUSE Manager Server LTS 4.3 | kernel-syms +3 | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
| SUSE Manager Proxy LTS 4.3 | kernel-default-base | 5.14.21-150400.24.179.1.150400.24.92.1 | SUSE-SU-2025:03628-1 |
| SUSE Manager Proxy LTS 4.3 | kernel-syms +2 | 5.14.21-150400.24.179.1 | SUSE-SU-2025:03628-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.1.19-30.43 | 1.0-0.amzn2023 | ALAS2023-2023-138 |
| Amazon Linux 2023 | perf +12 | 6.1.19-30.43.amzn2023 | ALAS2023-2023-138 |
| Amazon Linux 2 | kernel-livepatch-4.14.309-231.529 | 1.0-0.amzn2 | ALAS2-2023-1987 |
| Amazon Linux 2 | perf +8 | 4.14.309-231.529.amzn2 | ALAS2-2023-1987 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | rv +28 | 5.14.0-570.52.1.0.1.el9_6 | ELSA-2025-21112, ELSA-2025-17760 |
| Oracle Linux 8 | perf +19 | 4.18.0-553.80.1.el8_10 | ELSA-2025-18297 |
| Oracle Linux 7 | perf +12 | 3.10.0-1160.119.1.0.14.el7 | ELSA-2025-21063 |
Advisories 34
- WID-SEC-2025-2092 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Nov 9, 2026
- ALSA-2025:17760 Moderate: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:18297 Moderate: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:18298 Moderate: kernel-rt security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:22752 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2025:21082 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2025:21063 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2025:19492 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2025:19268 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2025:19104 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2025:18298 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2025:18297 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2025:23445 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 2, 2026
- WID-SEC-2026-0349 Dell Avamar und NetWorker: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 17, 2026
- RHSA-2025:21128 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHSA-2025:21083 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHSA-2025:21051 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 20, 2026
- RHSA-2025:21112 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2025:21084 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
- RHSA-2025:17760 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Jul 30, 2026
- SUSE-SU-2025:4189-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Mar 23, 2026
- ALAS2-2023-1987 Important: kernel security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Feb 8, 2026
- ALAS2023-2023-138 Important: kernel security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Feb 8, 2026
- SUSE-SU-2025:03615-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:3761-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:03628-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:3716-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- ELSA-2025-21063 Moderate: kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Dec 16, 2025
- ELSA-2025-21112 Moderate: kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 26, 2025
- RLSA-2025:18298 Moderate: kernel-rt security update Rocky Linux Security Advisories · Oct 26, 2025
- RLSA-2025:18297 Moderate: kernel security update Rocky Linux Security Advisories · Oct 26, 2025
- ELSA-2025-18297 Moderate: kernel security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Oct 20, 2025
- RLSA-2025:17760 Moderate: kernel security update Rocky Linux Security Advisories · Oct 18, 2025
- ELSA-2025-17760 Moderate: kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Oct 13, 2025
References
- https://git.kernel.org/stable/c/cc4d0d4251748a8a68026938f4055d2ac47c5719
- https://git.kernel.org/stable/c/1effbddaff60eeef8017c6dea1ee0ed970164d14
- https://git.kernel.org/stable/c/63551e4b7cbcd9914258827699eb2cb6ed6e4a16
- https://git.kernel.org/stable/c/ae849d2f48019ff9c104e32bf588ccbfb200e971
- https://git.kernel.org/stable/c/36ec108b7bd7e280edb22de028467bd09d644620
- https://git.kernel.org/stable/c/4d497e8b200a175094e0ac252ed878add39b8771
- https://git.kernel.org/stable/c/9477db935eb690f697d9bcc4f608927841bc8b36
- https://git.kernel.org/stable/c/32e62025e5e52fbe4812ef044759de7010b15dbc