CVE-2025-38575

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aead_request_free to match aead_request_alloc Use aead_request_free() instead of kfree() to properly free memory allocated by aead_request_alloc(). This ensures sensitive crypto data is zeroed before being freed.
CVSS

No CVSS.

Configurations

No configuration.

History

03 Nov 2025, 20:18

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ksmbd: usar aead_request_free para coincidir con aead_request_alloc. Usar aead_request_free() en lugar de kfree() para liberar correctamente la memoria asignada por aead_request_alloc(). Esto garantiza que los datos criptográficos confidenciales se pongan a cero antes de liberarse.

18 Apr 2025, 07:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-04-18 07:15

Updated : 2025-11-03 20:18


NVD link : CVE-2025-38575

Mitre link : CVE-2025-38575

CVE.ORG link : CVE-2025-38575


JSON object : View

Products Affected

No product.

CWE

No CWE.