kernel: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt

A use-after-free vulnerability was found in the Linux kernel's seqiv Sequence IV crypto module. After calling cryptoaeadencrypt, the underlying request may be freed by asynchronous completion handlers. The code then incorrectly dereferences req-iv to compare against info, accessing potentially...

CVE-2025-71131: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req-iv after cryptoaeadencrypt As soon as cryptoaeadencrypt is called, the underlying request may be freed by an asynchronous completion. Thus dereferencing req-iv after it returns is invalid. Instead o...

The vulnerability of the crypto_aead_encrypt and crypto_aead_decrypt functions in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cryptoaeadencrypt and cryptoaeaddecrypt functions in the Linux operating system is related to the return of incorrect code states. Exploiting this vulnerability can allow an attacker to cause a service failure...