crypto subsystem

A subtle but consequential bug in the Linux kernel’s crypto subsystem was fixed upstream in May 2025: CVE-2025-37808 addresses a synchronization mistake—the null crypto algorithm was being protected by a sleeping mutex while it can be freed in softirq context via AF_ALG, so maintainers changed...