QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-38575

Back to search

CVE-2025-38575

Published: Apr 18, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aead_request_free to match aead_request_alloc Use aead_request_free() instead of kfree() to properly free memory allocated by aead_request_alloc(). This ensures sensitive crypto data is zeroed before being freed.

VendorProductVersions

Linux

Linux

affected
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 - < 571b342d4688801fc1f6a1934389dac09425dc93
affected
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 - < a6b594868268c3a7bfaeced912525cd2c445529a
affected
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 - < 1de7fec4d3012672e31eeb6679ea60f7ca010ef9
affected
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 - < 3e341dbd5f5a6e5a558e67da80731dc38a7f758c
affected
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 - < aef10ccd74512c52e30c5ee19d0031850973e78d

+2 more versions

Linux

Linux

affected
5.15
unaffected
0 - < 5.15
unaffected
5.15.180 - <= 5.15.*
unaffected
6.1.134 - <= 6.1.*
unaffected
6.6.87 - <= 6.6.*

+4 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now