CVE-2026-28529CWE-416

CVE-2026-28529

High · published March 25, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
8.0
In the wild
Unconfirmed
What it is

cryptodev-linux version 1.14 and prior contain a page reference handling flaw in the get_userbuf function of the /dev/crypto device driver that allows local users to trigger use-after-free conditions. Attackers with access to the /dev/crypto interface can repeatedly decrement reference counts of controlled pages to achieve local privilege escalation.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00188 · 8.0th percentile
Weakness
CWE-416 · Use After Free
Published
2026-03-25T18:16Z
Affected products (1)
ProductVersionsFixed in
cryptodev-linux/cryptodev-linux≤ 1.14—
References (4)
https://gist.github.com/n4sm/0fd2479e0c23e0fa2f192cd8fda45750 · [email protected]https://github.com/cryptodev-linux/cryptodev-linux/pull/104 · [email protected]https://nasm.re/posts/cryptodev-linux-vuln/ · [email protected]https://www.vulncheck.com/advisories/cryptodev-linux-get-userbuf-use-after-free-lpe · [email protected]
EPSS history
Timeline
  • 25 MAR 13:00Z
    cryptodev-linux <= 1.14 get_userbuf Use After Free LPE
    cvelistv5