A flaw was found in DPDK lib/vhost vhost-crypto. vhost_crypto_close_sess() frees a cryptodev session without invalidating the per-device session cache, so a later request with the same session id uses a dangling pointer. The data path also attaches vhost_session->sym or vhost_session->asym without checking the session type, so an asymmetric session can be treated as symmetric.