[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-38052":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":164,"related":165,"reserved_at":9,"published_at":181,"modified_at":182,"state":183,"summary":184,"references_raw":193,"kevs":233,"epss":234,"epss_history":237,"metrics":513,"affected":519},"CVE-2025-38052","In the Linux kernel, the following vulnerability has been resolved:\n\nnet/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done\n\nSyzbot reported a slab-use-after-free with the following call trace:\n\n  ==================================================================\n  BUG: KASAN: slab-use-after-free in tipc_aead_encrypt_done+0x4bd/0x510 net/tipc/crypto.c:840\n  Read of size 8 at addr ffff88807a733000 by task kworker/1:0/25\n\n  Call Trace:\n   kasan_report+0xd9/0x110 mm/kasan/report.c:601\n   tipc_aead_encrypt_done+0x4bd/0x510 net/tipc/crypto.c:840\n   crypto_request_complete include/crypto/algapi.h:266\n   aead_request_complete include/crypto/internal/aead.h:85\n   cryptd_aead_crypt+0x3b8/0x750 crypto/cryptd.c:772\n   crypto_request_complete include/crypto/algapi.h:266\n   cryptd_queue_worker+0x131/0x200 crypto/cryptd.c:181\n   process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231\n\n  Allocated by task 8355:\n   kzalloc_noprof include/linux/slab.h:778\n   tipc_crypto_start+0xcc/0x9e0 net/tipc/crypto.c:1466\n   tipc_init_net+0x2dd/0x430 net/tipc/core.c:72\n   ops_init+0xb9/0x650 net/core/net_namespace.c:139\n   setup_net+0x435/0xb40 net/core/net_namespace.c:343\n   copy_net_ns+0x2f0/0x670 net/core/net_namespace.c:508\n   create_new_namespaces+0x3ea/0xb10 kernel/nsproxy.c:110\n   unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c:228\n   ksys_unshare+0x419/0x970 kernel/fork.c:3323\n   __do_sys_unshare kernel/fork.c:3394\n\n  Freed by task 63:\n   kfree+0x12a/0x3b0 mm/slub.c:4557\n   tipc_crypto_stop+0x23c/0x500 net/tipc/crypto.c:1539\n   tipc_exit_net+0x8c/0x110 net/tipc/core.c:119\n   ops_exit_list+0xb0/0x180 net/core/net_namespace.c:173\n   cleanup_net+0x5b7/0xbf0 net/core/net_namespace.c:640\n   process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231\n\nAfter freed the tipc_crypto tx by delete namespace, tipc_aead_encrypt_done\nmay still visit it in cryptd_queue_worker workqueue.\n\nI reproduce this issue by:\n  ip netns add ns1\n  ip link add veth1 type veth peer name veth2\n  ip link set veth1 netns ns1\n  ip netns exec ns1 tipc bearer enable media eth dev veth1\n  ip netns exec ns1 tipc node set key this_is_a_master_key master\n  ip netns exec ns1 tipc bearer disable media eth dev veth1\n  ip netns del ns1\n\nThe key of reproduction is that, simd_aead_encrypt is interrupted, leading\nto crypto_simd_usable() return false. Thus, the cryptd_queue_worker is\ntriggered, and the tipc_crypto tx will be visited.\n\n  tipc_disc_timeout\n    tipc_bearer_xmit_skb\n      tipc_crypto_xmit\n        tipc_aead_encrypt\n          crypto_aead_encrypt\n            // encrypt()\n            simd_aead_encrypt\n              // crypto_simd_usable() is false\n              child = &ctx->cryptd_tfm->base;\n\n  simd_aead_encrypt\n    crypto_aead_encrypt\n      // encrypt()\n      cryptd_aead_encrypt_enqueue\n        cryptd_aead_enqueue\n          cryptd_enqueue_request\n            // trigger cryptd_queue_worker\n            queue_work_on(smp_processor_id(), cryptd_wq, &cpu_queue->work)\n\nFix this by holding net reference count before encrypt.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148,150,152,154,156,158,160,162],{"_key":25},"SUSE-SU-2025:02853-1",{"_key":27},"SUSE-SU-2025:02923-1",{"_key":29},"USN-7770-1",{"_key":31},"USN-7789-2",{"_key":33},"SUSE-SU-2025:02969-1",{"_key":35},"SUSE-SU-2025:03023-1",{"_key":37},"DLA-4327-1",{"_key":39},"DLA-4328-1",{"_key":41},"DSA-5973-1",{"_key":43},"RHSA-2025:12209",{"_key":45},"RHSA-2025:12311",{"_key":47},"RHSA-2025:12662",{"_key":49},"RHSA-2025:12746",{"_key":51},"RHSA-2025:12752",{"_key":53},"RHSA-2025:12753",{"_key":55},"RHSA-2025:13029",{"_key":57},"RHSA-2025:13030",{"_key":59},"RHSA-2025:13061",{"_key":61},"RHSA-2025:13120",{"_key":63},"RHSA-2025:13776",{"_key":65},"RHSA-2025:15798",{"_key":67},"RHSA-2025:15921",{"_key":69},"RHSA-2025:15931",{"_key":71},"RHSA-2025:15932",{"_key":73},"RHSA-2025:15933",{"_key":75},"RHSA-2025:16008",{"_key":77},"RHSA-2025:16045",{"_key":79},"SUSE-SU-2025:02997-1",{"_key":81},"SUSE-SU-2025:03011-1",{"_key":83},"SUSE-SU-2025:20577-1",{"_key":85},"SUSE-SU-2025:20586-1",{"_key":87},"SUSE-SU-2025:20601-1",{"_key":89},"SUSE-SU-2025:20602-1",{"_key":91},"SUSE-SU-2025:21074-1",{"_key":93},"SUSE-SU-2025:21139-1",{"_key":95},"SUSE-SU-2025:21179-1",{"_key":97},"SUSE-SU-2025:02996-1",{"_key":99},"OPENSUSE-SU-2025:20081-1",{"_key":101},"DEBIAN-CVE-2025-38052",{"_key":103},"RHSA-2025:13135",{"_key":105},"USN-8028-1",{"_key":107},"USN-8028-2",{"_key":109},"USN-8028-3",{"_key":111},"USN-8028-4",{"_key":113},"USN-8028-5",{"_key":115},"USN-8028-6",{"_key":117},"USN-8028-7",{"_key":119},"USN-8028-8",{"_key":121},"USN-8031-1",{"_key":123},"USN-8031-2",{"_key":125},"USN-8031-3",{"_key":127},"USN-8052-1",{"_key":129},"USN-8052-2",{"_key":131},"USN-8074-1",{"_key":133},"USN-8074-2",{"_key":135},"USN-8126-1",{"_key":137},"UBUNTU-CVE-2025-38052",{"_key":139},"USN-7704-1",{"_key":141},"USN-7704-2",{"_key":143},"USN-7704-3",{"_key":145},"USN-7704-4",{"_key":147},"USN-7704-5",{"_key":149},"USN-7711-1",{"_key":151},"USN-7712-1",{"_key":153},"USN-7712-2",{"_key":155},"USN-7769-1",{"_key":157},"USN-7769-2",{"_key":159},"USN-7769-3",{"_key":161},"USN-7771-1",{"_key":163},"USN-7789-1",[],[166,167,168,169,170,171,172,173,174,175,176,177,178,179,180],{"_key":25},{"_key":27},{"_key":33},{"_key":35},{"_key":79},{"_key":81},{"_key":83},{"_key":85},{"_key":87},{"_key":89},{"_key":91},{"_key":93},{"_key":95},{"_key":97},{"_key":99},"2025-06-18T09:33:33.427Z","2026-05-11T21:20:20.422Z","Analyzed",{"cisa_kev":185,"cisa_ransomware":185,"cisa_vendor":9,"epss_severity":186,"epss_score":187,"severity":188,"severity_score":189,"severity_version":190,"severity_source":191,"severity_vector":192,"severity_status":183},false,"low",0.00082,"high",7.8,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[194,200,204,208,212,216,220,224,229],{"url":195,"sources":196,"tags":198},"https://git.kernel.org/stable/c/d42ed4de6aba232d946d20653a70f79158a6535b",[197,191],"cve.org",[199],"Patch",{"url":201,"sources":202,"tags":203},"https://git.kernel.org/stable/c/f5c2c4eaaa5a8e7e0685ec031d480e588e263e59",[197,191],[199],{"url":205,"sources":206,"tags":207},"https://git.kernel.org/stable/c/b8fcae6d2e93c54cacb8f579a77d827c1c643eb5",[197,191],[199],{"url":209,"sources":210,"tags":211},"https://git.kernel.org/stable/c/b19fc1d0be3c3397e5968fe2627f22e7f84673b1",[197,191],[199],{"url":213,"sources":214,"tags":215},"https://git.kernel.org/stable/c/689a205cd968a1572ab561b0c4c2d50a10e9d3b0",[197,191],[199],{"url":217,"sources":218,"tags":219},"https://git.kernel.org/stable/c/4a0fddc2c0d5c28aec8c262ad4603be0bef1938c",[197,191],[199],{"url":221,"sources":222,"tags":223},"https://git.kernel.org/stable/c/e279024617134c94fd3e37470156534d5f2b3472",[197,191],[199],{"url":225,"sources":226,"tags":227},"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html",[197,191],[228],"Third Party Advisory",{"url":230,"sources":231,"tags":232},"https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html",[197,191],[228],[],{"date":235,"score":187,"percentile":236},"2026-06-03",0.24072,[238,242,245,248,251,254,257,260,263,266,269,273,277,280,283,287,290,293,296,299,302,305,308,312,314,318,321,324,327,330,333,336,339,342,345,348,351,354,357,360,363,366,369,372,375,379,383,386,388,391,394,397,400,403,406,409,412,415,418,421,424,427,430,433,436,439,442,445,448,451,454,457,460,463,466,469,472,475,478,481,484,487,490,492,495,498,501,504,507,510],{"date":239,"score":240,"percentile":241},"2025-11-04",0.00092,0.26751,{"date":243,"score":240,"percentile":244},"2025-11-05",0.2673,{"date":246,"score":240,"percentile":247},"2025-11-06",0.26738,{"date":249,"score":240,"percentile":250},"2025-11-07",0.2674,{"date":252,"score":240,"percentile":253},"2025-11-08",0.26736,{"date":255,"score":240,"percentile":256},"2025-11-09",0.26688,{"date":258,"score":240,"percentile":259},"2025-11-10",0.26654,{"date":261,"score":240,"percentile":262},"2025-11-11",0.26673,{"date":264,"score":240,"percentile":265},"2025-11-12",0.26711,{"date":267,"score":240,"percentile":268},"2025-11-13",0.26714,{"date":270,"score":271,"percentile":272},"2025-11-14",0.0006,0.18764,{"date":274,"score":275,"percentile":276},"2025-11-15",0.00057,0.17905,{"date":278,"score":275,"percentile":279},"2025-11-16",0.1787,{"date":281,"score":275,"percentile":282},"2025-11-17",0.17837,{"date":284,"score":285,"percentile":286},"2025-11-18",0.00061,0.14749,{"date":288,"score":285,"percentile":289},"2025-11-19",0.14764,{"date":291,"score":285,"percentile":292},"2025-11-20",0.14776,{"date":294,"score":275,"percentile":295},"2025-11-21",0.17846,{"date":297,"score":275,"percentile":298},"2025-11-22",0.17861,{"date":300,"score":275,"percentile":301},"2025-11-23",0.17833,{"date":303,"score":275,"percentile":304},"2025-11-24",0.17799,{"date":306,"score":275,"percentile":307},"2025-11-25",0.17789,{"date":309,"score":310,"percentile":311},"2025-11-26",0.00089,0.25817,{"date":313,"score":310,"percentile":311},"2025-11-27",{"date":315,"score":316,"percentile":317},"2025-11-28",0.00068,0.21002,{"date":319,"score":316,"percentile":320},"2025-11-29",0.20989,{"date":322,"score":310,"percentile":323},"2025-11-30",0.2575,{"date":325,"score":310,"percentile":326},"2025-12-01",0.25784,{"date":328,"score":310,"percentile":329},"2025-12-02",0.2581,{"date":331,"score":310,"percentile":332},"2025-12-03",0.25818,{"date":334,"score":310,"percentile":335},"2025-12-04",0.25752,{"date":337,"score":310,"percentile":338},"2025-12-05",0.25806,{"date":340,"score":310,"percentile":341},"2025-12-06",0.25811,{"date":343,"score":310,"percentile":344},"2025-12-07",0.25779,{"date":346,"score":310,"percentile":347},"2025-12-08",0.2578,{"date":349,"score":310,"percentile":350},"2025-12-09",0.25829,{"date":352,"score":310,"percentile":353},"2025-12-10",0.25897,{"date":355,"score":310,"percentile":356},"2025-12-11",0.25922,{"date":358,"score":310,"percentile":359},"2025-12-12",0.2594,{"date":361,"score":310,"percentile":362},"2025-12-13",0.25943,{"date":364,"score":310,"percentile":365},"2025-12-14",0.25915,{"date":367,"score":310,"percentile":368},"2025-12-15",0.25889,{"date":370,"score":310,"percentile":371},"2025-12-16",0.25899,{"date":373,"score":310,"percentile":374},"2025-12-17",0.25971,{"date":376,"score":377,"percentile":378},"2025-12-18",0.00017,0.03447,{"date":380,"score":381,"percentile":382},"2025-12-19",0.00022,0.05299,{"date":384,"score":381,"percentile":385},"2025-12-20",0.05302,{"date":387,"score":381,"percentile":385},"2025-12-21",{"date":389,"score":381,"percentile":390},"2025-12-22",0.05243,{"date":392,"score":381,"percentile":393},"2025-12-23",0.05253,{"date":395,"score":381,"percentile":396},"2025-12-24",0.05291,{"date":398,"score":381,"percentile":399},"2025-12-25",0.05324,{"date":401,"score":381,"percentile":402},"2025-12-26",0.05328,{"date":404,"score":377,"percentile":405},"2025-12-27",0.03467,{"date":407,"score":381,"percentile":408},"2025-12-28",0.05319,{"date":410,"score":381,"percentile":411},"2025-12-29",0.05312,{"date":413,"score":381,"percentile":414},"2025-12-30",0.05272,{"date":416,"score":381,"percentile":417},"2025-12-31",0.05304,{"date":419,"score":381,"percentile":420},"2026-01-01",0.05386,{"date":422,"score":381,"percentile":423},"2026-01-02",0.05381,{"date":425,"score":381,"percentile":426},"2026-01-03",0.05346,{"date":428,"score":381,"percentile":429},"2026-01-04",0.05242,{"date":431,"score":381,"percentile":432},"2026-01-05",0.05187,{"date":434,"score":381,"percentile":435},"2026-01-06",0.05183,{"date":437,"score":381,"percentile":438},"2026-01-07",0.05203,{"date":440,"score":381,"percentile":441},"2026-01-08",0.05257,{"date":443,"score":381,"percentile":444},"2026-01-09",0.05255,{"date":446,"score":381,"percentile":447},"2026-01-10",0.05261,{"date":449,"score":381,"percentile":450},"2026-01-11",0.0524,{"date":452,"score":381,"percentile":453},"2026-01-12",0.05125,{"date":455,"score":381,"percentile":456},"2026-01-13",0.05113,{"date":458,"score":381,"percentile":459},"2026-01-14",0.0516,{"date":461,"score":381,"percentile":462},"2026-01-15",0.0511,{"date":464,"score":381,"percentile":465},"2026-01-16",0.05098,{"date":467,"score":381,"percentile":468},"2026-01-17",0.0509,{"date":470,"score":381,"percentile":471},"2026-01-18",0.05068,{"date":473,"score":381,"percentile":474},"2026-01-19",0.0502,{"date":476,"score":381,"percentile":477},"2026-01-20",0.0499,{"date":479,"score":381,"percentile":480},"2026-01-21",0.0498,{"date":482,"score":381,"percentile":483},"2026-01-22",0.04966,{"date":485,"score":381,"percentile":486},"2026-01-23",0.05019,{"date":488,"score":381,"percentile":489},"2026-01-24",0.05064,{"date":491,"score":381,"percentile":486},"2026-01-25",{"date":493,"score":381,"percentile":494},"2026-01-26",0.04996,{"date":496,"score":381,"percentile":497},"2026-01-27",0.04979,{"date":499,"score":381,"percentile":500},"2026-01-28",0.0496,{"date":502,"score":381,"percentile":503},"2026-01-29",0.04978,{"date":505,"score":381,"percentile":506},"2026-01-30",0.04981,{"date":508,"score":381,"percentile":509},"2026-01-31",0.04949,{"date":511,"score":381,"percentile":512},"2026-02-01",0.05048,[514],{"source":191,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":515,"cvss_v4_0":9},{"baseScore":189,"baseSeverity":516,"vectorString":192,"impactScore":517,"exploitabilityScore":518},"HIGH",9.8,4.6,[520,529,561],{"ecosystem":9,"name":521,"vendor":522,"product":523,"cpe_part":524,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":525},"debian linux","debian","debian_linux","o",[526],{"version":527,"is_range":185,"range_type":528,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0","cpe",{"ecosystem":9,"name":530,"vendor":531,"product":531,"cpe_part":532,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":533},"Linux","linux","a",[534,541,544,547,550,553,556,559],{"version":535,"is_range":536,"range_type":197,"version_start":537,"version_start_type":538,"version_end":539,"version_end_type":540,"fixed_in":9},">= fc1b6d6de2208774efd2a20bf0daddb02d18b1e0, \u003C d42ed4de6aba232d946d20653a70f79158a6535b",true,"fc1b6d6de2208774efd2a20bf0daddb02d18b1e0","including","d42ed4de6aba232d946d20653a70f79158a6535b","excluding",{"version":542,"is_range":536,"range_type":197,"version_start":537,"version_start_type":538,"version_end":543,"version_end_type":540,"fixed_in":9},">= fc1b6d6de2208774efd2a20bf0daddb02d18b1e0, \u003C f5c2c4eaaa5a8e7e0685ec031d480e588e263e59","f5c2c4eaaa5a8e7e0685ec031d480e588e263e59",{"version":545,"is_range":536,"range_type":197,"version_start":537,"version_start_type":538,"version_end":546,"version_end_type":540,"fixed_in":9},">= fc1b6d6de2208774efd2a20bf0daddb02d18b1e0, \u003C b8fcae6d2e93c54cacb8f579a77d827c1c643eb5","b8fcae6d2e93c54cacb8f579a77d827c1c643eb5",{"version":548,"is_range":536,"range_type":197,"version_start":537,"version_start_type":538,"version_end":549,"version_end_type":540,"fixed_in":9},">= fc1b6d6de2208774efd2a20bf0daddb02d18b1e0, \u003C b19fc1d0be3c3397e5968fe2627f22e7f84673b1","b19fc1d0be3c3397e5968fe2627f22e7f84673b1",{"version":551,"is_range":536,"range_type":197,"version_start":537,"version_start_type":538,"version_end":552,"version_end_type":540,"fixed_in":9},">= fc1b6d6de2208774efd2a20bf0daddb02d18b1e0, \u003C 689a205cd968a1572ab561b0c4c2d50a10e9d3b0","689a205cd968a1572ab561b0c4c2d50a10e9d3b0",{"version":554,"is_range":536,"range_type":197,"version_start":537,"version_start_type":538,"version_end":555,"version_end_type":540,"fixed_in":9},">= fc1b6d6de2208774efd2a20bf0daddb02d18b1e0, \u003C 4a0fddc2c0d5c28aec8c262ad4603be0bef1938c","4a0fddc2c0d5c28aec8c262ad4603be0bef1938c",{"version":557,"is_range":536,"range_type":197,"version_start":537,"version_start_type":538,"version_end":558,"version_end_type":540,"fixed_in":9},">= fc1b6d6de2208774efd2a20bf0daddb02d18b1e0, \u003C e279024617134c94fd3e37470156534d5f2b3472","e279024617134c94fd3e37470156534d5f2b3472",{"version":560,"is_range":185,"range_type":197,"version_start":560,"version_start_type":538,"version_end":560,"version_end_type":538,"fixed_in":9},"5.5",{"ecosystem":9,"name":562,"vendor":531,"product":563,"cpe_part":524,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":564},"linux kernel","linux_kernel",[565,568,572,576,580,584,588,590,592,594,596,598,600],{"version":566,"is_range":536,"range_type":528,"version_start":560,"version_start_type":538,"version_end":567,"version_end_type":540,"fixed_in":9},"gte5.5_lt5.10.238","5.10.238",{"version":569,"is_range":536,"range_type":528,"version_start":570,"version_start_type":538,"version_end":571,"version_end_type":540,"fixed_in":9},"gte5.11_lt5.15.185","5.11","5.15.185",{"version":573,"is_range":536,"range_type":528,"version_start":574,"version_start_type":538,"version_end":575,"version_end_type":540,"fixed_in":9},"gte5.16_lt6.1.141","5.16","6.1.141",{"version":577,"is_range":536,"range_type":528,"version_start":578,"version_start_type":538,"version_end":579,"version_end_type":540,"fixed_in":9},"gte6.2_lt6.6.93","6.2","6.6.93",{"version":581,"is_range":536,"range_type":528,"version_start":582,"version_start_type":538,"version_end":583,"version_end_type":540,"fixed_in":9},"gte6.7_lt6.12.31","6.7","6.12.31",{"version":585,"is_range":536,"range_type":528,"version_start":586,"version_start_type":538,"version_end":587,"version_end_type":540,"fixed_in":9},"gte6.13_lt6.14.9","6.13","6.14.9",{"version":589,"is_range":185,"range_type":528,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.15:rc1",{"version":591,"is_range":185,"range_type":528,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.15:rc2",{"version":593,"is_range":185,"range_type":528,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.15:rc3",{"version":595,"is_range":185,"range_type":528,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.15:rc4",{"version":597,"is_range":185,"range_type":528,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.15:rc5",{"version":599,"is_range":185,"range_type":528,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.15:rc6",{"version":601,"is_range":185,"range_type":528,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.15:rc7"]