In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - Set merge to zero early in af_alg_sendmsg
If an error causes af_alg_sendmsg to abort, ctx->merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into af_alg_sendmsg when it attempts to do a merge that can't be done.
Fix this by setting ctx->merge to zero near the start of the loop.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.1.155-176.282Upgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade kernel-livepatch-6.12.53-69.119Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-libbpfUpgrade python3-perfUpgrade kernel6.12-modules-extra-commonUpgrade bpftool6.12Upgrade kernel-libbpf-debuginfoUpgrade perfUpgrade kernel6.12-libbpf-develUpgrade kernel-tools-develUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12Upgrade perf-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel6.12-headersUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade python3-perf6.12Upgrade kernelUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel6.12-develUpgrade kernel6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel6.12-tools-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-tools-develUpgrade perf6.12Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Oct 28, 2025 | Oct 4, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 13, 2025 | Nov 13, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Feb 3, 2026 | Feb 2, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Oct 4, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade dtb-marvellUpgrade dtb-renesasUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade dtb-appleUpgrade dtb-armUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-develUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade dtb-amazonUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade dtb-caviumUpgrade kernel-rtUpgrade dlm-kmp-rtUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade dtb-alteraUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kselftests-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade kernel-rt-extra | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-fipsUpgrade linux-image-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-gcp-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-aws-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-6.8 | Mar 17, 2026 | Oct 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Oct 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub