Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-38575

ksmbd: use aead_request_free to match aead_request_alloc

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aead_request_free to match aead_request_alloc Use aead_request_free() instead of kfree() to properly free memory allocated by aead_request_alloc(). This ensures sensitive crypto data is zeroed before being freed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < 571b342d4688801fc1f6a1934389dac09425dc93affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < a6b594868268c3a7bfaeced912525cd2c445529aaffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < 1de7fec4d3012672e31eeb6679ea60f7ca010ef9affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < 3e341dbd5f5a6e5a558e67da80731dc38a7f758caffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < aef10ccd74512c52e30c5ee19d0031850973e78daffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < 46caeae23035192b9cc41872c827f30d0233f16eaffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < 6171063e9d046ffa46f51579b2ca4a43caef581aaffected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 5.15.180 to ≤ 5.15.*unaffected
  • 6.1.134 to ≤ 6.1.*unaffected
  • 6.6.87 to ≤ 6.6.*unaffected
  • 6.12.23 to ≤ 6.12.*unaffected
  • 6.13.11 to ≤ 6.13.*unaffected
  • 6.14.2 to ≤ 6.14.*unaffected
  • 6.15 to ≤ *unaffected

References