Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2025-38079 Details

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fails, sk2 is freed. However, it is also freed in af_alg_release, leading to slab-use-after-free error.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://cert-portal.siemens.com/productcert/html/ssa-082556.html siemens-SADP
https://git.kernel.org/stable/c/0346f4b742345d1c733c977f3a7aef5a6419a967 kernel.orgPatch
https://git.kernel.org/stable/c/134daaba93193df9e988524b5cd2f52d15eb1993 kernel.orgPatch
https://git.kernel.org/stable/c/2f45a8d64fb4ed4830a4b3273834ecd6ca504896 kernel.orgPatch
https://git.kernel.org/stable/c/5bff312b59b3f2a54ff504e4f4e47272b64f3633 kernel.orgPatch

see all 11 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-415Double Free[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 2.6.38, < 5.4.294
>= 5.5, < 5.10.238
>= 5.11, < 5.15.185
>= 5.16, < 6.1.141
>= 6.2, < 6.6.93

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.15:rc7:*:*:*:*:*:*

Remediation

  • No remediation found in references.
debian debian linux
11.0

CPE

  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

8 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2025-38079
NVD Published Date:
Jun 18, 2025
NVD Last Modified:
Jul 30, 2026
Source:
kernel.org
CVE-2025-38079 Details - Not Deferred