Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-39964

crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencies in the internal socket state. Disallow this by adding a new ctx->write field that indiciates exclusive ownership for writing.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to < 0f28c4adbc4a97437874c9b669fd7958a8c6d6ceaffected
  • 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to < e4c1ec11132ec466f7362a95f36a506ce4dc08c9affected
  • 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to < 1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8affected
  • 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to < 7c4491b5644e3a3708f3dbd7591be0a570135b84affected
  • 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to < 9aee87da5572b3a14075f501752e209801160d3daffected
  • 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to < 45bcf60fe49b37daab1acee57b27211ad1574042affected
  • 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 to < 1b34cbbf4f011a121ef7b2d7d6e6920a036d5285affected

Linux Linux

Default version status: affected

  • 2.6.38affected
  • 0 to < 2.6.38unaffected
  • 5.10.245 to ≤ 5.10.*unaffected
  • 5.15.194 to ≤ 5.15.*unaffected
  • 6.1.154 to ≤ 6.1.*unaffected
  • 6.6.108 to ≤ 6.6.*unaffected
  • 6.12.49 to ≤ 6.12.*unaffected
  • 6.16.9 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References