VYPR
High severity7.5NVD Advisory· Published Jan 14, 2026· Updated Jul 30, 2026

CVE-2025-71131

CVE-2025-71131

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

As soon as crypto_aead_encrypt is called, the underlying request may be freed by an asynchronous completion. Thus dereferencing req->iv after it returns is invalid.

Instead of checking req->iv against info, create a new variable unaligned_info and use it for that purpose instead.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

93

Patches

Vulnerability mechanics

References

8

News mentions

1