← Database

CVE-2025-38575

MEDIUM CVSS: 5.5 Published: 2025-04-18 Modified: 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aead_request_free to match aead_request_alloc Use aead_request_free() instead of kfree() to properly free memory allocated by aead_request_alloc(). This ensures sensitive crypto data is zeroed before being freed.

Affected Platforms

Linux Linux KernelDebian Debian Linux

Weakness Type

NVD-CWE-noinfo

References