NetSight
IP …
high7.8

CVE-2025-38079

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type a…

Impact

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fails, sk2 is freed. However, it is also freed in af_alg_release, leading to slab-use-after-free error.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.38 before 5.4.294
from 5.5 before 5.10.238
from 5.11 before 5.15.185
from 5.16 before 6.1.141
from 6.2 before 6.6.93
from 6.7 before 6.12.31
DebianDebian Linux
Version 11.0

Weakness classification

CWE-415

References