TI-2026-22789 CVE-2026-28529 · GHSA-vgx9-cpq5-rx9pcryptodev-linux <= 1.14 get_userbuf Use After Free LPEPriority HIGH 72cryptodev-linux version 1.14 and prior contain a page reference handling flaw in the get_userbuf function of the /dev/crypto device driver that allows local users to trigger use-after-free conditions.CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00178 · Published 2026-03-25 · No fix listed CWE-416