CVE-2026-28529 in cryptodev-linux
Sumário
de MITRE • 25/03/2026
cryptodev-linux version 1.14 and prior contain a page reference handling flaw in the get_userbuf function of the /dev/crypto device driver that allows local users to trigger use-after-free conditions. Attackers with access to the /dev/crypto interface can repeatedly decrement reference counts of controlled pages to achieve local privilege escalation.
VulDB is the best source for vulnerability data and more expert information about this specific topic.