High 7.8Published Jun 18, 2025

CVE-2025-38079crypto: algif_hash - fix double free in hash_accept

Updated under an hour ago (Oct 28, 2026, 12:10 AM ET)

Does this affect you?

It affects Linux and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_hash - fix double free in hash_accept If accept(2) is called on socket type algif_hash with MSG_MORE flag set and crypto_ahash_import fails, sk2 is freed. However, it is also freed in af_alg_release, leading to slab-use-after-free error.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Not yet received
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from fe869cdb89c95d060c77eea20204d6c91f233b53 before 5bff312b59b3f2a54ff504e4f4e47272b64f3633; from fe869cdb89c95d060c77eea20204d6c91f233b53 before bf7bba75b91539e93615f560893a599c1e1c98bf; from fe869cdb89c95d060c77eea20204d6c91f233b53 before c3059d58f79fdfb2201249c2741514e34562b547; from fe869cdb89c95d060c77eea20204d6c91f233b53 before f0f3d09f53534ea385d55ced408f2b67059b16e4; from fe869cdb89c95d060c77eea20204d6c91f233b53 before 134daaba93193df9e988524b5cd2f52d15eb1993; from fe869cdb89c95d060c77eea20204d6c91f233b53 before 2f45a8d64fb4ed4830a4b3273834ecd6ca504896; from fe869cdb89c95d060c77eea20204d6c91f233b53 before 0346f4b742345d1c733c977f3a7aef5a6419a967; from fe869cdb89c95d060c77eea20204d6c91f233b53 before b2df03ed4052e97126267e8c13ad4204ea6ba9b6	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.5	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.5	CISA ADP

References

References

https://git.kernel.org/stable/c/5bff312b59b3f2a54ff504e4f4e47272b64f3633
https://git.kernel.org/stable/c/bf7bba75b91539e93615f560893a599c1e1c98bf
https://git.kernel.org/stable/c/c3059d58f79fdfb2201249c2741514e34562b547
https://git.kernel.org/stable/c/f0f3d09f53534ea385d55ced408f2b67059b16e4
https://git.kernel.org/stable/c/134daaba93193df9e988524b5cd2f52d15eb1993
https://git.kernel.org/stable/c/2f45a8d64fb4ed4830a4b3273834ecd6ca504896
https://git.kernel.org/stable/c/0346f4b742345d1c733c977f3a7aef5a6419a967
https://git.kernel.org/stable/c/b2df03ed4052e97126267e8c13ad4204ea6ba9b6

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.