← Back

CVE-2025-38079

nvd nist
Published: Jun 18, 2025Modified: May 12, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fails, sk2 is freed. However, it is also freed in af_alg_release, leading to slab-use-after-free error.

Affected (15)

Linux
1 product
Linux Kernel
Debian
1 product
Debian Linux
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
From 2.6.38 to 5.4.294
Linux Kernel
From 5.11 to 5.15.185
Linux Kernel
From 5.16 to 6.1.141
Linux Kernel
From 5.5 to 5.10.238
Linux Kernel
From 6.13 to 6.14.9
Linux Kernel
From 6.2 to 6.6.93
Linux Kernel
From 6.7 to 6.12.31
Linux Kernel
Version 6.15 rc1
Linux Kernel
Version 6.15 rc2
Linux Kernel
Version 6.15 rc3
Linux Kernel
Version 6.15 rc4
Linux Kernel
Version 6.15 rc5
Linux Kernel
Version 6.15 rc6
Linux Kernel
Version 6.15 rc7
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 11.0

Related CWEs

CWE-415
Double Free
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

References (11)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.