Linux Kernel Control Flow Integrity Crash Vulnerability in Crypto Acomp

A vulnerability in the Linux kernel's crypto component, specifically within the acomp interface, can lead to a crash when control flow integrity (CFI) is enabled. This issue arises from type punning, which creates a mismatch in the expected data types. The vulnerability affects the workspace management functions, particularly the stream free function, by using inconsistent types. The problem has been addressed by standardizing the type usage and invoking the free function through a properly typed function pointer.

Impact

The vulnerability could cause a system crash, disrupting normal operations and potentially leading to a denial of service.