CVE-2025-38052

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done

Syzbot reported a slab-use-after-free with the following call trace:

==================================================================

BUG: KASAN: slab-use-after-free in tipc_aead_encrypt_done+0x4bd/0x510 net/tipc/crypto.c:840

Read of size 8 at addr ffff88807a733000 by task kworker/1:0/25

Call Trace:

kasan_report+0xd9/0x110 mm/kasan/report.c:601

tipc_aead_encrypt_done+0x4bd/0x510 net/tipc/crypto.c:840

crypto_request_complete include/crypto/algapi.h:266

aead_request_complete include/crypto/internal/aead.h:85

cryptd_aead_crypt+0x3b8/0x750 crypto/cryptd.c:772

crypto_request_complete include/crypto/algapi.h:266

cryptd_queue_worker+0x131/0x200 crypto/cryptd.c:181

process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231

Allocated by task 8355:

kzalloc_noprof include/linux/slab.h:778

tipc_crypto_start+0xcc/0x9e0 net/tip

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References