CVE-2025-71131

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the crypto subsystem, specifically related to the seqiv functionality. After the crypto aead encrypt function is called, the associated request structure (req) may be freed asynchronously. Subsequently, attempting to dereference req->iv is invalid, potentially leading to a use-after-free condition. The issue is addressed by creating a new variable, unaligned info, to store the necessary information instead of directly using req->iv.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.