High · published October 13, 2025
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 71.5th percentile for exploit probability.
In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
Issuing two writes to the same af_alg socket is bogus as the
data will be interleaved in an unpredictable fashion. Furthermore,
concurrent writes may create inconsistencies in the internal
socket state.
Disallow this by adding a new ctx->write field that indiciates
exclusive ownership for writing.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 2.6.38, < 5.10.245 | 5.10.245 |
| linux/linux_kernel | ≥ 5.11, < 5.15.194 | 5.15.194 |
| linux/linux_kernel | ≥ 5.16, < 6.1.154 | 6.1.154 |
| linux/linux_kernel | ≥ 6.2, < 6.6.108 | 6.6.108 |
| linux/linux_kernel | ≥ 6.7, < 6.12.49 | 6.12.49 |
| linux/linux_kernel | ≥ 6.13, < 6.16.9 | 6.16.9 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| siemens/simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware | ≥ 3.1.6 | — |
| siemens/simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware | ≥ 3.1.6 | — |