Bug 2396379 (CVE-2023-53373)

Summary:	CVE-2023-53373 kernel: crypto: seqiv - Handle EBUSY correctly
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	Keywords:	Security
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2025-09-18 14:01:39 UTC

In the Linux kernel, the following vulnerability has been resolved:

crypto: seqiv - Handle EBUSY correctly

As it is seqiv only handles the special return value of EINPROGERSS,
which means that in all other cases it will free data related to the
request.

However, as the caller of seqiv may specify MAY_BACKLOG, we also need
to expect EBUSY and treat it in the same way.  Otherwise backlogged
requests will trigger a use-after-free.

Comment 1 Keith Grant 2025-09-18 16:22:58 UTC

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025091855-CVE-2023-53373-087e@gregkh/T

Comment 3 errata-xmlrpc 2025-10-13 04:01:38 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2025:17760 https://access.redhat.com/errata/RHSA-2025:17760

Comment 4 errata-xmlrpc 2025-10-20 02:31:20 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2025:18298 https://access.redhat.com/errata/RHSA-2025:18298

Comment 5 errata-xmlrpc 2025-10-20 02:40:12 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2025:18297 https://access.redhat.com/errata/RHSA-2025:18297

Comment 8 errata-xmlrpc 2025-10-27 16:19:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2025:19104 https://access.redhat.com/errata/RHSA-2025:19104

Comment 10 errata-xmlrpc 2025-10-29 15:11:51 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2025:19268 https://access.redhat.com/errata/RHSA-2025:19268

Comment 11 errata-xmlrpc 2025-11-03 15:53:41 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2025:19492 https://access.redhat.com/errata/RHSA-2025:19492

Comment 12 errata-xmlrpc 2025-11-12 00:31:28 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2025:21051 https://access.redhat.com/errata/RHSA-2025:21051

Comment 13 errata-xmlrpc 2025-11-12 02:37:54 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2025:21063 https://access.redhat.com/errata/RHSA-2025:21063

Comment 14 errata-xmlrpc 2025-11-12 04:25:18 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2025:21082 https://access.redhat.com/errata/RHSA-2025:21082

Comment 15 errata-xmlrpc 2025-11-12 05:14:42 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2025:21083 https://access.redhat.com/errata/RHSA-2025:21083

Comment 16 errata-xmlrpc 2025-11-12 05:16:55 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Via RHSA-2025:21084 https://access.redhat.com/errata/RHSA-2025:21084

Comment 17 errata-xmlrpc 2025-11-12 11:25:17 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2025:21112 https://access.redhat.com/errata/RHSA-2025:21112

Comment 18 errata-xmlrpc 2025-11-12 13:48:54 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2025:21128 https://access.redhat.com/errata/RHSA-2025:21128