PT-2025-33779

CVE-2025-38581

·

Published

2025-06-24

·

Updated

2026-10-21

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: A crash can occur when rebinding a ccp device with CONFIG CRYPTO DEV CCP DEBUGFS enabled. The crash is triggered by attempting to access a null pointer after destroying the debugfs directory, preventing its recreation during rebind operations. The issue is related to the ccp5 debugfs destroy function and the ccp debugfs dir variable. The patch resolves this by setting ccp debugfs dir to NULL after destroying it.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
AZL-66500
CLSA-2025-1764085382
CLSA-2026-1777616064
CLSA-2026-1777633439
DLA-4327-1
DLA-4328-1
ECHO-9F1F-0CC5-7CD8
MGASA-2025-0234
MGASA-2025-0235
OESA-2025-2123
OESA-2025-2765
OESA-2025-2766
OESA-2025-2767
OPENSUSE-SU-2025:20081-1
SUSE-SU-2025:03272-1
SUSE-SU-2025_03272-1
SUSE-SU-2025:03290-1
SUSE-SU-2025_03290-1
SUSE-SU-2025:03301-1
SUSE-SU-2025_03301-1
SUSE-SU-2025:03382-1
SUSE-SU-2025_03382-1
SUSE-SU-2025:03602-1
SUSE-SU-2025:03633-1
SUSE-SU-2025:03634-1
SUSE-SU-2025:20653-1
SUSE-SU-2025:20669-1
SUSE-SU-2025:20739-1
SUSE-SU-2025:20756-1
SUSE-SU-2025:21074-1
SUSE-SU-2025:21139-1
SUSE-SU-2025:21179-1
SUSE-SU-2026:20560-1
USN-7879-1
USN-7879-2
USN-7879-3
USN-7879-4
USN-7880-1
USN-7909-1
USN-7909-2
USN-7909-3
USN-7909-4
USN-7909-5
USN-7910-1
USN-7910-2
USN-7933-1
USN-7934-1
USN-7938-1
USN-8028-1
USN-8028-2
USN-8028-3
USN-8028-4
USN-8028-5
USN-8028-6
USN-8028-7
USN-8028-8
USN-8031-1
USN-8031-2
USN-8031-3
USN-8052-1
USN-8052-2
USN-8074-1
USN-8074-2
USN-8126-1
Found an issue in the description? Have something to add? Feel free to write us 👾