AZL-64007
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-64007.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-64007
- Upstream
- Published
- 2025-06-18T10:15:41Z
- Modified
- 2026-04-01T05:20:14.520221Z
- Summary
- CVE-2025-38079 affecting package kernel for versions less than 6.6.96.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
crypto: algifhash - fix double free in hashaccept
If accept(2) is called on socket type algifhash with MSGMORE flag set and cryptoahashimport fails, sk2 is freed. However, it is also freed in afalgrelease, leading to slab-use-after-free error.
- References