In the Linux kernel, the following vulnerability has been resolved:
crypto: algif_hash - Remove bogus SGL free on zero-length error path
When a zero-length message is hashed by algif_hash, and an error is triggered, it tries to free an SG list that was never allocated in the first place. Fix this by not freeing the SG list on the zero-length error path.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade kernel-source-vanilla | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-starfiveUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1027-oemUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-6.5Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-6.5.0-1024-gcp | Jul 15, 2024 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub