In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - Set merge to zero early in af_alg_sendmsg
If an error causes af_alg_sendmsg to abort, ctx->merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into af_alg_sendmsg when it attempts to do a merge that can't be done.
Fix this by setting ctx->merge to zero near the start of the loop.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-debuginfoUpgrade kernel-toolsUpgrade python3-perf6.12Upgrade kernel6.12-develUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-tools-develUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade perf6.12Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel6.12-headersUpgrade perfUpgrade bpftool6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-libbpfUpgrade kernel6.12Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel6.12-libbpf-debuginfoUpgrade bpftool6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-libbpf-develUpgrade kernel-tools-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-livepatch-6.12.53-69.119Upgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.1.155-176.282Upgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-static | Oct 28, 2025 | Oct 4, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 13, 2025 | Nov 13, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Feb 3, 2026 | Feb 2, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Oct 4, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade dtb-lgUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade dtb-marvellUpgrade dtb-amazonUpgrade kernel-develUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatchUpgrade dtb-apmUpgrade kernel-macrosUpgrade cluster-md-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-rt-develUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade dtb-broadcomUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-devel | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-gkeopUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-aws-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gke-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-oracleUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04b | Mar 17, 2026 | Oct 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Oct 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub