Control Flow Integrity Vulnerability in Linux Kernel's Crypto Acomp Module

CVE-2025-39777

What is CVE-2025-39777?

A vulnerability in the Linux kernel's crypto module has been identified, specifically in the acomp functionality. This flaw may lead to system instability when control flow integrity (CFI) is enabled. The issue arises due to inconsistent data types within the workspace management. To remediate this, the system's 'stream' free function has been adjusted to ensure type consistency when invoked via function pointers. It is crucial for users and system administrators to apply the latest patches to maintain system integrity and security.

References