VDB

GHSA-cp5p-6f9j-7hj2

GHSA-cp5p-6f9j-7hj2 PUBLISHED

Record from GitHub Advisory Database · Published December 9, 2025

In the Linux kernel, the following vulnerability has been resolved: crypto: api - Use work queue in crypto_destroy_instance The function crypto_drop_spawn expects to be called in process context. However, when an instance is unregistered while it still has active users, the last user may cause the instance to be freed in atomic context. Fix this by delaying the freeing to a work queue.

Timeline

  • Dec 9, 2025 CVE Published
  • May 1, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-cp5p-6f9j-7hj2
vulnetix vdb fixes GHSA-cp5p-6f9j-7hj2

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-cp5p-6f9j-7hj2/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›