Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Set merge to zero early in af_alg_sendmsg If an error causes af_alg_sendmsg to abort, ctx->merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into af_alg_sendmsg when it attempts to do a merge that can't be done. Fix this by setting ctx->merge to zero near the start of the loop.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 before 28f6f37abca7c5c9eb3959c66310f1d4d98b8aaf; affected 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 before db2b42425dfbde4983b0c20fb7cfa05f70e6a745; affected 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 before 6241b9e2809b12da9130894cf5beddf088dc1b8a; affected 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 before 2374c11189ef704a3e4863646369f1b8e6a27d71; affected 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 before 24c1106504c625fabd3b7229611af617b4c27ac7; affected 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 before 045ee26aa3920a47ec46d7fcb302420bf01fd753; affected 8ff590903d5fc7f5a0a988c38267a3d08e6393a2 before 9574b2330dbd2b5459b74d3b5e9619d39299fc6f |
| Linux / Linux | affected 2.6.38; unaffected 0 before 2.6.38; unaffected 5.10.260 through 5.10.*; unaffected 5.15.211 through 5.15.*; unaffected 6.1.154 through 6.1.*; unaffected 6.6.108 through 6.6.*; unaffected 6.12.49 through 6.12.*; unaffected 6.16.9 through 6.16.*; unaffected 6.17 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/28f6f37abca7c5c9eb3959c66310f1d4d98b8aaf
- https://git.kernel.org/stable/c/db2b42425dfbde4983b0c20fb7cfa05f70e6a745
- https://git.kernel.org/stable/c/6241b9e2809b12da9130894cf5beddf088dc1b8a
- https://git.kernel.org/stable/c/2374c11189ef704a3e4863646369f1b8e6a27d71
- https://git.kernel.org/stable/c/24c1106504c625fabd3b7229611af617b4c27ac7
- https://git.kernel.org/stable/c/045ee26aa3920a47ec46d7fcb302420bf01fd753
- https://git.kernel.org/stable/c/9574b2330dbd2b5459b74d3b5e9619d39299fc6f
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.