CVE-2025-38079
HIGH 7.8EPSS 0.2%
In the Linux kernel, the following vulnerability has been resolved:crypto: algif_hash - fix double free in hash_acceptIf accept(2) is called on socket type algif_hash withMSG_MORE flag set and crypto_ahash_import fails,sk2 is freed. However, it is also freed in af_alg_release,leading to slab-use-after-free error.
- CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 0.17% chance of exploitation in the next 30 days, 7th percentile
- Published
- 2025-06-18
- Updated
- 2026-08-05