CVE-2025-39931: crypto: af_alg - Set merge to zero early in af_alg_sendmsg
crypto: afalg - Set merge to zero early in afalgsendmsg
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In af_alg_sendmsg, set ctx->merge to zero near the start of the loop so that on abort paths ctx->merge cannot retain a garbage value from the previous loop.
Linux kernel crypto: af_alg (af_alg_sendmsg) ctx->merge = 0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39931?
CVE-2025-39931 has a medium severity level due to the potential for crashes in the Linux kernel.
How do I fix CVE-2025-39931?
To resolve CVE-2025-39931, update the Linux kernel to the latest patched version as indicated by the security advisory.
Which systems are affected by CVE-2025-39931?
CVE-2025-39931 affects various versions of the Linux kernel that utilize the af_alg functionality.
What are the potential consequences of CVE-2025-39931?
The consequences of CVE-2025-39931 include possible system crashes due to garbage values in the merge context.
Is CVE-2025-39931 related to other vulnerabilities?
CVE-2025-39931 can be linked to general integrity issues in kernel operations, but it is a standalone vulnerability.