crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, and infinite recursion) by triggering EBUSY on a full queue. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7618