In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - limit RX SG extraction by receive buffer budget
Make af_alg_get_rsgl() limit each RX scatterlist extraction to the remaining receive buffer budget.
af_alg_get_rsgl() currently uses af_alg_readable() only as a gate before extracting data into the RX scatterlist. Limit each extraction to the remaining af_alg_rcvbuf(sk) budget so that receive-side accounting matches the amount of data attached to the request.
If skcipher cannot obtain enough RX space for at least one chunk while more data remains to be processed, reject the recvmsg call instead of rounding the request length down to zero.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64kUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-rt-64k-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade python3-perfUpgrade kernel-64k-debug-modules-coreUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-rt-64k-debug-develUpgrade kernel-develUpgrade kernel-rt-64kUpgrade kernel-64k-debug-coreUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-debug-modules-extraUpgrade rtlaUpgrade libperfUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64k-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-coreUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-debug-coreUpgrade kernel-devel-matchedUpgrade perfUpgrade kernel-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extra | May 27, 2026 | May 19, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 20, 2026 | Apr 25, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-gke-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-kvmUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-azureUpgrade linux-image-oracle-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegraUpgrade linux-image-ibm-classicUpgrade linux-image-gkeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64kUpgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-xilinxUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1064-gcp-fips | May 25, 2026 | Apr 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub