QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-39931

Back to search

CVE-2025-39931

Published: Oct 4, 2025

Modified: May 12, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Set merge to zero early in af_alg_sendmsg If an error causes af_alg_sendmsg to abort, ctx->merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into af_alg_sendmsg when it attempts to do a merge that can't be done. Fix this by setting ctx->merge to zero near the start of the loop.

VendorProductVersions

Linux

Linux

affected
8ff590903d5fc7f5a0a988c38267a3d08e6393a2 - < 6241b9e2809b12da9130894cf5beddf088dc1b8a
affected
8ff590903d5fc7f5a0a988c38267a3d08e6393a2 - < 2374c11189ef704a3e4863646369f1b8e6a27d71
affected
8ff590903d5fc7f5a0a988c38267a3d08e6393a2 - < 24c1106504c625fabd3b7229611af617b4c27ac7
affected
8ff590903d5fc7f5a0a988c38267a3d08e6393a2 - < 045ee26aa3920a47ec46d7fcb302420bf01fd753
affected
8ff590903d5fc7f5a0a988c38267a3d08e6393a2 - < 9574b2330dbd2b5459b74d3b5e9619d39299fc6f

Linux

Linux

affected
2.6.38
unaffected
0 - < 2.6.38
unaffected
6.1.154 - <= 6.1.*
unaffected
6.6.108 - <= 6.6.*
unaffected
6.12.49 - <= 6.12.*

+2 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now