CVE-2025-38079

In the Linux kernel, the following vulnerability has been resolved:

crypto: algif_hash - fix double free in hash_accept

If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fails, sk2 is freed. However, it is also freed in af_alg_release, leading to slab-use-after-free error.

This vulnerability is classified as having a Moderate severity for Red Hat Enterprise Linux because exploitation is restricted to local authenticated users who can create cryptographic user-space sockets and trigger specific error conditions during socket processing. An unprivileged local attacker could potentially cause a denial of service (system crash) or memory corruption through a double-free flaw in the AF_ALG hash interface. However, network-based attacks are not possible, and typical enterprise deployments do not expose or rely on user-space access to kernel cryptographic sockets.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.