PT-2025-25826 · Linux+10 · Linux Kernel+10
Syzbot
·
Published
2025-05-20
·
Updated
2026-05-04
·
CVE-2025-38052
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A slab-use-after-free issue has been identified in the Linux kernel, specifically in the
tipc aead encrypt done function. This issue can occur when the simd aead encrypt function is interrupted, leading to crypto simd usable() returning false, which in turn triggers the cryptd queue worker workqueue. As a result, the tipc crypto tx may still be visited after it has been freed. The issue can be reproduced by creating a network namespace, enabling the TIPC bearer, setting a key, disabling the bearer, and then deleting the namespace.Recommendations
To resolve this issue, hold the net reference count before encrypting. This can be achieved by modifying the
tipc aead encrypt function to hold the net reference count before calling the crypto aead encrypt function.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Debian
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu