In the Linux kernel, the following vulnerability has been resolved:
crypto: af-alg - fix NULL pointer dereference in scatterwalk
The AF_ALG interface fails to unmark the end of a Scatter/Gather List (SGL) when chaining a new af_alg_tsgl structure. If a sendmsg() fills an SGL exactly to MAX_SGL_ENTS, the last entry is marked as the end. A subsequent sendmsg() allocates a new SGL and chains it, but fails to clear the end marker on the previous SGL's last data entry.
This causes the crypto scatterwalk to hit a premature end, returning NULL on sg_next() and leading to a kernel panic during dereference.
Fix this by explicitly unmarking the end of the previous SGL when performing sg_chain() in af_alg_alloc_tsgl().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.253-252.1015Upgrade kernel-livepatch-5.15.204-143.230Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade perf | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 3, 2026 | May 3, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 1, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-generic-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-kvmUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-aws-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-awsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-fips-5.15Upgrade linux-image-gcpUpgrade linux-image-ibm-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gke-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1063-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-5.15Upgrade linux-image-xilinxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-186-genericUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-ibmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fde-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtualUpgrade linux-image-raspi-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-aws-64kUpgrade linux-image-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-intelUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-azure-fde-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-64k-lts-22.04 | May 25, 2026 | May 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub