Threats tagged 'ghsa-4mjx-2pg4-x29v'

A use-after-free vulnerability was found and resolved in the Linux kernel's sun8i-ce crypto_rng interface. This interface, which provided hardware PRNG functionality, was redundant and unused, so it has been removed. The vulnerability involved improper handling of DMA shutdown when a signal interrupted wait_for_completion_interruptible_timeout(), leading to a use-after-free condition. The sun8i-ce support for the actual hardware RNG interface remains unaffected. The fix removes the vulnerable crypto_rng code rather than patching it separately.