In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_hash - Remove bogus SGL free on zero-length error path
When a zero-length message is hashed by algif_hash, and an error is triggered, it tries to free an SG list that was never allocated in the first place. Fix this by not freeing the SG list on the zero-length error path.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-azure-extra | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-6.5Upgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-starfiveUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1023-awsUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-generic-64k | Jul 15, 2024 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub