In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_hash - Remove bogus SGL free on zero-length error path
When a zero-length message is hashed by algif_hash, and an error is triggered, it tries to free an SG list that was never allocated in the first place. Fix this by not freeing the SG list on the zero-length error path.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-obs-qa | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1023-awsUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-nvidia-6.5Upgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-aws | Jul 15, 2024 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub