CVE-2025-38575

Katalog CVE

CVSS 5.5 · Medium EPSS 0,27%

Kerentanan pada linux kernel, debian linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aead_request_free to match aead_request_alloc Use aead_request_free() instead of kfree() to properly free memory allocated by aead_request_alloc(). This ensures sensitive crypto data is zeroed before being freed.

Rincian

Terbit di NVD

18 April 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/1de7fec4d3012672e31eeb6679ea60f7ca010ef9 patch
• https://git.kernel.org/stable/c/3e341dbd5f5a6e5a558e67da80731dc38a7f758c patch
• https://git.kernel.org/stable/c/46caeae23035192b9cc41872c827f30d0233f16e patch
• https://git.kernel.org/stable/c/571b342d4688801fc1f6a1934389dac09425dc93 patch
• https://git.kernel.org/stable/c/6171063e9d046ffa46f51579b2ca4a43caef581a patch
• https://git.kernel.org/stable/c/a6b594868268c3a7bfaeced912525cd2c445529a patch
• https://git.kernel.org/stable/c/aef10ccd74512c52e30c5ee19d0031850973e78d patch
• https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html mailing list · advisory pihak ketiga