NetSight
IP …
medium5.5

CVE-2025-38575

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aead_request_free to match aead_request_alloc Use aead_request_free() instead of…

Impact

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aead_request_free to match aead_request_alloc Use aead_request_free() instead of kfree() to properly free memory allocated by aead_request_alloc(). This ensures sensitive crypto data is zeroed before being freed.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.15 before 5.15.180
from 5.16 before 6.1.134
from 6.2 before 6.6.87
from 6.7 before 6.12.23
from 6.13 before 6.13.11
from 6.14 before 6.14.2
DebianDebian Linux
Version 11.0

References