In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - Set merge to zero early in af_alg_sendmsg
If an error causes af_alg_sendmsg to abort, ctx->merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into af_alg_sendmsg when it attempts to do a merge that can't be done.
Fix this by setting ctx->merge to zero near the start of the loop.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.12-debuginfoUpgrade perfUpgrade python3-perfUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel-livepatch-6.1.155-176.282Upgrade kernel-headersUpgrade kernel6.12-toolsUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12Upgrade kernel-tools-develUpgrade kernel6.12-libbpf-develUpgrade kernel6.12Upgrade kernel6.12-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-libbpfUpgrade kernel6.12-libbpf-staticUpgrade kernel-livepatch-6.12.53-69.119Upgrade perf-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12-libbpf-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-develUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python3-perf6.12Upgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel6.12-headersUpgrade kernel-develUpgrade kernelUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel6.12-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade perf6.12 | Oct 28, 2025 | Oct 4, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 13, 2025 | Nov 13, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Feb 3, 2026 | Feb 2, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Oct 4, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade dtb-apmUpgrade dtb-exynosUpgrade dtb-amazonUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-appleUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade dtb-armUpgrade dtb-amdUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade kernel-64kbUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade dtb-broadcomUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade dtb-caviumUpgrade gfs2-kmp-default | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-oracleUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-gcpUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidiaUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-genericUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-fips-6.8Upgrade linux-image-virtualUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-ibm-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatency-64k | Mar 17, 2026 | Oct 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Oct 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub