Double Free Vulnerability in Linux Kernel Affecting Socket Type algif_hash

CVE-2025-38079

What is CVE-2025-38079?

A double free vulnerability exists in the Linux kernel's handling of the algif_hash socket type, specifically during the accept(2) call with the MSG_MORE flag. When crypto_ahash_import fails, the memory allocated for sk2 is incorrectly freed. Consequently, a second attempt to free this memory by af_alg_release can lead to a slab-use-after-free condition, posing risks of memory corruption and potential execution of arbitrary code.

References