In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_hash - Remove bogus SGL free on zero-length error path
When a zero-length message is hashed by algif_hash, and an error is triggered, it tries to free an SG list that was never allocated in the first place. Fix this by not freeing the SG list on the zero-length error path.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-64kb-extraUpgrade kernel-azure-vdso | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-6.5Upgrade linux-image-oem-22.04 | Jul 15, 2024 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub