CVE-2025-38079

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-38079
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38079.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-38079
Downstream
Related
Published
2025-06-18T09:33:53Z
Modified
2026-08-12T03:30:41Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
crypto: algif_hash - fix double free in hash_accept
Details

In the Linux kernel, the following vulnerability has been resolved:

crypto: algif_hash - fix double free in hash_accept

If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fails, sk2 is freed. However, it is also freed in af_alg_release, leading to slab-use-after-free error.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38079.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
fe869cdb89c95d060c77eea20204d6c91f233b53
Fixed
5bff312b59b3f2a54ff504e4f4e47272b64f3633
Fixed
bf7bba75b91539e93615f560893a599c1e1c98bf
Fixed
c3059d58f79fdfb2201249c2741514e34562b547
Fixed
f0f3d09f53534ea385d55ced408f2b67059b16e4
Fixed
134daaba93193df9e988524b5cd2f52d15eb1993
Fixed
2f45a8d64fb4ed4830a4b3273834ecd6ca504896
Fixed
0346f4b742345d1c733c977f3a7aef5a6419a967
Fixed
b2df03ed4052e97126267e8c13ad4204ea6ba9b6

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38079.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.38
Fixed
5.4.294
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.238
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.185
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.141
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.93
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.31
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.14.9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-38079.json"