SECUFOCUSNOW
Home›CVE index›CVE-2025-38052
Review reviewHigh

CVE-2025-38052

Linux Linux, linux kernel, debian linux

In the Linux kernel, the following vulnerability has been resolved: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Syzbot reported a slab-use-after-free with the following call trace: ================================================================== BUG: KASAN: slab-use-after-free in tipc_aead_encrypt_done+0x4bd/0x510 net/tipc/crypto.c:840 Read of size 8 at addr ffff88807a733000 by task kworker/1:0/25 Call Trace: kasan_report+0xd9/0x110 mm/kasan/report.c:601 tipc_aead_encrypt_done+0x4bd/0x510 net/tipc/crypto.c:840 crypto_request_complete include/crypto/algapi.h:266 aead_r...

CVSS
7.8
EPSS
0.46%
37.4% percentile
CISA KEV
Not listed
Published
2025.06.18
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.46%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Syzbot reported a slab-use-after-free with the following call trace: ================================================================== BUG: KASAN: slab-use-after-free in tipc_aead_encrypt_done+0x4bd/0x510 net/tipc/crypto.c:840 Read of size 8 at addr ffff88807a733000 by task kworker/1:0/25 Call Trace: kasan_report+0xd9/0x110 mm/kasan/report.c:601 tipc_aead_encrypt_done+0x4bd/0x510 net/tipc/crypto.c:840 crypto_request_complete include/crypto/algapi.h:266 aead_r...

Affected product and versions

Product
Linux Linux, linux kernel, debian linux
Affected versions
>= fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 < d42ed4de6aba232d946d20653a70f79158a6535b, >= fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 < f5c2c4eaaa5a8e7e0685ec031d480e588e263e59, >= fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 < b8fcae6d2e93c54cacb8f579a77d827c1c643eb5, >= fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 < b19fc1d0be3c3397e5968fe2627f22e7f84673b1, >= fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 < 689a205cd968a1572ab561b0c4c2d50a10e9d3b0, >= fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 < 4a0fddc2c0d5c28aec8c262ad4603be0bef1938c, >= fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 < e279024617134c94fd3e37470156534d5f2b3472, >= 5.5, >= 5.5 < 5.10.238, >= 5.11 < 5.15.185, >= 5.16 < 6.1.141, >= 6.2 < 6.6.93, >= 6.7 < 6.12.31, >= 6.13 < 6.14.9, 6.15, 11.0
Fixed versions
5.10.238, 5.15.185, 6.1.141, 6.6.93, 6.12.31, 6.14.9

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel, debian linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416