Linux Kernel NX Crypto Context Type Confusion Vulnerability

A vulnerability in the Linux kernel's crypto subsystem, specifically within the NX cryptography context management, has been addressed. The issue arose because the function 'nx_crypto_ctx_shash_exit' incorrectly called 'nx_crypto_ctx_exit' with a context type intended for a different purpose, leading to a kernel oops error. This type mismatch caused a fault by attempting to access invalid memory, disrupting normal kernel operations. The problem was similar for 'nx_crypto_ctx_skcipher_exit', but this issue had not been encountered for several years.

Impact

The vulnerability could lead to a kernel oops, indicating a serious error where the kernel attempted to access invalid memory, potentially causing a crash or instability.

Reproduction

The vulnerability can be reproduced by using the 'AF_ALG' socket type, which can trigger the 'nx_crypto_ctx_shash_exit' function with an incorrect context type, leading to the described kernel oops error.

Remediation

Users can apply the latest patches from the Linux kernel stable tree to address this vulnerability.