Description

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Set merge to zero early in af_alg_sendmsg If an error causes af_alg_sendmsg to abort, ctx->merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into af_alg_sendmsg when it attempts to do a merge that can't be done. Fix this by setting ctx->merge to zero near the start of the loop.

INFO

Published Date :

2025-10-04T07:30:55.964Z

Last Modified :

2025-10-04T07:30:55.964Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2025-39931 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-39931.

URL Resource
https://git.kernel.org/stable/c/045ee26aa3920a47ec46d7fcb302420bf01fd753 cve-icon cve-icon
https://git.kernel.org/stable/c/2374c11189ef704a3e4863646369f1b8e6a27d71 cve-icon cve-icon
https://git.kernel.org/stable/c/24c1106504c625fabd3b7229611af617b4c27ac7 cve-icon cve-icon
https://git.kernel.org/stable/c/6241b9e2809b12da9130894cf5beddf088dc1b8a cve-icon cve-icon
https://git.kernel.org/stable/c/9574b2330dbd2b5459b74d3b5e9619d39299fc6f cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025100416-CVE-2025-39931-8ff7@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-39931 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-39931 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact