In the Linux kernel, the following vulnerability has been resolved:
crypto: af-alg - fix NULL pointer dereference in scatterwalk
The AF_ALG interface fails to unmark the end of a Scatter/Gather List (SGL) when chaining a new af_alg_tsgl structure. If a sendmsg() fills an SGL exactly to MAX_SGL_ENTS, the last entry is marked as the end. A subsequent sendmsg() allocates a new SGL and chains it, but fails to clear the end marker on the previous SGL's last data entry.
This causes the crypto scatterwalk to hit a premature end, returning NULL on sg_next() and leading to a kernel panic during dereference.
Fix this by explicitly unmarking the end of the previous SGL when performing sg_chain() in af_alg_alloc_tsgl().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.253-252.1015Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftoolUpgrade kernel-livepatch-5.15.204-143.230 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 3, 2026 | May 3, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 1, 2026 |
| Ubuntu | — | Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-fips-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1112-awsUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-xilinxUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-laptop-23.10Upgrade linux-image-intelUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-virtual-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-virtualUpgrade linux-image-oem-20.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-fde-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-intel-iotg-5.15 | May 25, 2026 | May 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub