cryptodev-linux version 1.14 and earlier contains a use-after-free vulnerability in the get_userbuf function of the /dev/crypto device driver. This flaw allows local users with access to /dev/crypto to decrement reference counts of controlled pages repeatedly, potentially leading to local privilege escalation.