High · published October 4, 2025
In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - Set merge to zero early in af_alg_sendmsg
If an error causes af_alg_sendmsg to abort, ctx->merge may contain
a garbage value from the previous loop. This may then trigger a
crash on the next entry into af_alg_sendmsg when it attempts to do
a merge that can't be done.
Fix this by setting ctx->merge to zero near the start of the loop.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 2.6.38, < 6.1.154 | 6.1.154 |
| linux/linux_kernel | ≥ 6.2, < 6.6.108 | 6.6.108 |
| linux/linux_kernel | ≥ 6.7, < 6.12.49 | 6.12.49 |
| linux/linux_kernel | ≥ 6.13, < 6.16.9 | 6.16.9 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |