CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept
In the Linux kernel, the following vulnerability has been resolved:
crypto: algifhash - fix double free in hashaccept
If accept(2) is called on socket type algifhash with MSGMORE flag set and cryptoahashimport fails, sk2 is freed. However, it is also freed in afalgrelease, leading to slab-use-after-free error.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38079?
CVE-2025-38079 is classified as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2025-38079?
To mitigate CVE-2025-38079, ensure you update to the latest version of the Linux kernel where the vulnerability has been patched.
What systems are affected by CVE-2025-38079?
CVE-2025-38079 affects the Linux kernel across various distributions that utilize the algif_hash socket type.
What impact does CVE-2025-38079 have on the Linux kernel?
CVE-2025-38079 can lead to a double free vulnerability, potentially causing crashes or instability in the system.
Is CVE-2025-38079 a remote exploit?
CVE-2025-38079 does not appear to be a remote exploit but rather requires local access to the affected socket.