Vulnerabilities
Report: Essential Guide: CVE-2026-28529 - cryptodev-linux <= 1.14 get_userbuf use after free lpe
CVE ID :CVE-2026-28529 Published : March 25, 2026, 2:16 p.m. | 27 minutes ago Description :cryptodev-linux version 1.14 and prior contain a page reference handling flaw in the get_userbuf function of the /dev/crypto device driver that allows local users to trigger use-after-free conditions. Attackers with access to the /dev/crypto interface can repeatedly decrement reference counts of controlled pages to achieve local privilege escalation. Severity: 8.5 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE Details
Affected Product:
linux
Attack Vector:
local
Impact:
privilege escalation