{
  "threat_severity" : "Moderate",
  "public_date" : "2026-01-14T00:00:00Z",
  "bugzilla" : {
    "description" : "kernel: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt",
    "id" : "2429583",
    "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2429583"
  },
  "cvss3" : {
    "cvss3_base_score" : "5.5",
    "cvss3_scoring_vector" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
    "status" : "verified"
  },
  "cwe" : "CWE-825",
  "details" : [ "In the Linux kernel, the following vulnerability has been resolved:\ncrypto: seqiv - Do not use req->iv after crypto_aead_encrypt\nAs soon as crypto_aead_encrypt is called, the underlying request\nmay be freed by an asynchronous completion.  Thus dereferencing\nreq->iv after it returns is invalid.\nInstead of checking req->iv against info, create a new variable\nunaligned_info and use it for that purpose instead.", "A use-after-free vulnerability was found in the Linux kernel's seqiv (Sequence IV) crypto module. After calling crypto_aead_encrypt(), the underlying request may be freed by asynchronous completion handlers. The code then incorrectly dereferences req->iv to compare against info, accessing potentially freed memory. This can cause memory corruption or crashes when using asynchronous AEAD encryption." ],
  "statement" : "This vulnerability affects systems using the seqiv IV generator with asynchronous AEAD encryption algorithms. The race condition occurs when the encryption completes asynchronously before the calling code finishes examining the request structure. The use-after-free can cause kernel crashes or unpredictable behavior during cryptographic operations.",
  "affected_release" : [ {
    "product_name" : "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "release_date" : "2026-08-17T00:00:00Z",
    "advisory" : "RHSA-2026:55445",
    "cpe" : "cpe:/o:redhat:enterprise_linux_eus:10.0",
    "package" : "kernel-0:6.12.0-55.98.1.el10_0"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "release_date" : "2026-08-10T00:00:00Z",
    "advisory" : "RHSA-2026:52667",
    "cpe" : "cpe:/a:redhat:rhel_eus:9.6",
    "package" : "kernel-0:5.14.0-570.132.1.el9_6"
  } ],
  "package_state" : [ {
    "product_name" : "Red Hat Enterprise Linux 10",
    "fix_state" : "Affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:10"
  }, {
    "product_name" : "Red Hat Enterprise Linux 6",
    "fix_state" : "Out of support scope",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:6"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Will not fix",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 7",
    "fix_state" : "Affected",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:7"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Will not fix",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 8",
    "fix_state" : "Affected",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:8"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "kernel",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  }, {
    "product_name" : "Red Hat Enterprise Linux 9",
    "fix_state" : "Affected",
    "package_name" : "kernel-rt",
    "cpe" : "cpe:/o:redhat:enterprise_linux:9"
  } ],
  "references" : [ "https://www.cve.org/CVERecord?id=CVE-2025-71131\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-71131\nhttps://lore.kernel.org/linux-cve-announce/2026011452-CVE-2025-71131-c844@gregkh/T" ],
  "name" : "CVE-2025-71131",
  "csaw" : false
}