CVE-2026-64305

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat - protect service table iterations with service_lock

The servicetable list is protected by servicelock when entries are added or removed (in adfserviceadd() and adfserviceremove()), but several functions iterate over the list without holding this lock.

A concurrent adfserviceregister() or adfserviceunregister() call could modify the list during traversal, leading to list corruption or a use-after-free.

Fix this by holding servicelock across all listforeachentry() iterations of servicetable in adfdevinit(), adfdevstart(), adfdevstop(), adfdevshutdown(), adfdevrestartingnotify(), adfdevrestartednotify(), and adferror_notifier().

The lock ordering is safe: callers of the static helpers (adfdevup() and adfdevdown()) acquire statelock before servicelock, and no eventhld callback or servicelock holder ever acquires state_lock in the reverse order.