Threats tagged 'ghsa-7qhg-wpc6-3ff5'

CVE-2025-38500 is a use-after-free vulnerability in the Linux kernel's xfrm interface related to the collect_md property. The flaw occurs because the collect_md property can only be set during device creation, but the kernel did not properly prevent changes afterward, leading to a double free and kernel crash during network namespace teardown.