In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - Set merge to zero early in af_alg_sendmsg
If an error causes af_alg_sendmsg to abort, ctx->merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into af_alg_sendmsg when it attempts to do a merge that can't be done.
Fix this by setting ctx->merge to zero near the start of the loop.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade bpftoolUpgrade kernel6.12-develUpgrade kernel6.12-headersUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-tools-develUpgrade perf6.12Upgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python3-perf6.12Upgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-libbpfUpgrade kernel6.12-toolsUpgrade kernel-livepatch-6.1.155-176.282Upgrade kernel6.12-libbpf-debuginfoUpgrade bpftool6.12-debuginfoUpgrade bpftool6.12Upgrade python3-perfUpgrade perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel6.12-libbpf-develUpgrade kernel-tools-develUpgrade kernel-livepatch-6.12.53-69.119Upgrade kernel-headersUpgrade python3-perf6.12-debuginfoUpgrade perfUpgrade kernel6.12-modules-extra-common | Oct 28, 2025 | Oct 4, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 13, 2025 | Nov 13, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftool | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelists | Feb 3, 2026 | Feb 2, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Oct 4, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade dtb-amazonUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade kernel-default-extraUpgrade dtb-allwinnerUpgrade kernel-macrosUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kselftests-kmp-rtUpgrade dtb-qcomUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade dtb-amlogicUpgrade cluster-md-kmp-64kbUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kernel-default-vdso | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-awsUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-gkeUpgrade linux-image-gke-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-genericUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-virtualUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibmUpgrade linux-image-xilinxUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-gcp-fips-6.8 | Mar 17, 2026 | Oct 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Oct 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub