Medium severity5.5NVD Advisory· Published Apr 18, 2025· Updated Jun 17, 2026

CVE-2025-38575

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: use aead_request_free to match aead_request_alloc

Use aead_request_free() instead of kfree() to properly free memory allocated by aead_request_alloc(). This ensures sensitive crypto data is zeroed before being freed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Debian/linux
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Linux/Kernel3 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.15,<5.15.180
- (no CPE)
- (no CPE)range: 5.15
Linux/Ksmbdllm-fuzzy
osv-coords
pkg:linux/kernel
Range: >= 5.15.0, < 5.15.180

Patches

Vulnerability mechanics

References

git.kernel.org/stable/c/1de7fec4d3012672e31eeb6679ea60f7ca010ef9nvdPatch
git.kernel.org/stable/c/3e341dbd5f5a6e5a558e67da80731dc38a7f758cnvdPatch
git.kernel.org/stable/c/46caeae23035192b9cc41872c827f30d0233f16envdPatch
git.kernel.org/stable/c/571b342d4688801fc1f6a1934389dac09425dc93nvdPatch
git.kernel.org/stable/c/6171063e9d046ffa46f51579b2ca4a43caef581anvdPatch
git.kernel.org/stable/c/a6b594868268c3a7bfaeced912525cd2c445529anvdPatch
git.kernel.org/stable/c/aef10ccd74512c52e30c5ee19d0031850973e78dnvdPatch
lists.debian.org/debian-lts-announce/2025/05/msg00045.htmlnvdMailing ListThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000