Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-39931

crypto: af_alg - Set merge to zero early in af_alg_sendmsg

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Set merge to zero early in af_alg_sendmsg If an error causes af_alg_sendmsg to abort, ctx->merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into af_alg_sendmsg when it attempts to do a merge that can't be done. Fix this by setting ctx->merge to zero near the start of the loop.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to < 28f6f37abca7c5c9eb3959c66310f1d4d98b8aafaffected
  • 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to < db2b42425dfbde4983b0c20fb7cfa05f70e6a745affected
  • 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to < 6241b9e2809b12da9130894cf5beddf088dc1b8aaffected
  • 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to < 2374c11189ef704a3e4863646369f1b8e6a27d71affected
  • 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to < 24c1106504c625fabd3b7229611af617b4c27ac7affected
  • 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to < 045ee26aa3920a47ec46d7fcb302420bf01fd753affected
  • 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to < 9574b2330dbd2b5459b74d3b5e9619d39299fc6faffected

Linux Linux

Default version status: affected

  • 2.6.38affected
  • 0 to < 2.6.38unaffected
  • 5.10.260 to ≤ 5.10.*unaffected
  • 5.15.211 to ≤ 5.15.*unaffected
  • 6.1.154 to ≤ 6.1.*unaffected
  • 6.6.108 to ≤ 6.6.*unaffected
  • 6.12.49 to ≤ 6.12.*unaffected
  • 6.16.9 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References