CVE-2025-38575
kernel: ksmbd: use aead_request_free to match aead_request_alloc
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 18, 2025
Updated · June 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: use aead_request_free to match aead_request_alloc
Use aead_request_free() instead of kfree() to properly free memory allocated by aead_request_alloc(). This ensures sensitive crypto data is zeroed before being freed.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified