01 Record

CVE-2025-38052

net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done

HighPUBLISHEDCNA: Linux

CNA base score8.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.48% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 39.4% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-06-18 09:33Z1 YR AGO

Last updated

2026-08-05 11:59Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 8.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

31f32ec9e90fbce6f36ad033f856a301586d2e59edc7a1bb2c43c6995169d0ba

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxfc1b6d6de2208774efd2a20bf0daddb02d18b1e0 to < d42ed4de6aba232d946d20653a70f79158a6535b, fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 to < f5c2c4eaaa5a8e7e0685ec031d480e588e263e59, fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 to < b8fcae6d2e93c54cacb8f579a77d827c1c643eb5, fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 to < b19fc1d0be3c3397e5968fe2627f22e7f84673b1, fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 to < 689a205cd968a1572ab561b0c4c2d50a10e9d3b0, fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 to < 4a0fddc2c0d5c28aec8c262ad4603be0bef1938c, fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 to < e279024617134c94fd3e37470156534d5f2b3472, 5.5—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/d42ed4de6aba232d946d20653a70f79158a6535b
git.kernel.orghttps://git.kernel.org/stable/c/f5c2c4eaaa5a8e7e0685ec031d480e588e263e59
git.kernel.orghttps://git.kernel.org/stable/c/b8fcae6d2e93c54cacb8f579a77d827c1c643eb5
git.kernel.orghttps://git.kernel.org/stable/c/b19fc1d0be3c3397e5968fe2627f22e7f84673b1
git.kernel.orghttps://git.kernel.org/stable/c/689a205cd968a1572ab561b0c4c2d50a10e9d3b0
git.kernel.orghttps://git.kernel.org/stable/c/4a0fddc2c0d5c28aec8c262ad4603be0bef1938c
git.kernel.orghttps://git.kernel.org/stable/c/e279024617134c94fd3e37470156534d5f2b3472
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

01 Record index

CVE-2025-38052

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38052

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References