CVE-2026-28529

cryptodev-linux version 1.14 and prior contain a page reference handling flaw in the getuserbuf function of the /dev/crypto device driver that allows local users to trigger use-after-free conditions. Attackers with access to the /dev/crypto interface can repeatedly decrement reference counts of...

CVE-2026-28529

CVE-2026-28529 affects cryptodev-linux

PT-2026-27766

Name of the Vulnerable Software and Affected Versions cryptodev-linux versions prior to 1.15 Description A page reference handling flaw exists in the get userbuf function of the /dev/crypto device driver. This issue allows local users to trigger use-after-free conditions, which occurs when a...