CVE-2026-43043: crypto: af-alg - fix NULL pointer dereference in scatterwalk
In the Linux kernel, the following vulnerability has been resolved:
crypto: af-alg - fix NULL pointer dereference in scatterwalk
The AFALG interface fails to unmark the end of a Scatter/Gather List (SGL) when chaining a new afalgtsgl structure. If a sendmsg() fills an SGL exactly to MAXSGLENTS, the last entry is marked as the end. A subsequent sendmsg() allocates a new SGL and chains it, but fails to clear the end marker on the previous SGL's last data entry.
This causes the crypto scatterwalk to hit a premature end, returning NULL on sgnext() and leading to a kernel panic during dereference.
Fix this by explicitly unmarking the end of the previous SGL when performing sgchain() in afalgalloctsgl().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43043?
CVE-2026-43043 has a medium severity rating due to the potential for a NULL pointer dereference in the Linux kernel.
How do I fix CVE-2026-43043?
To fix CVE-2026-43043, you should apply the latest patch or update for your Linux kernel as provided by your distribution.
What systems are impacted by CVE-2026-43043?
CVE-2026-43043 affects the Linux kernel through the AF_ALG interface, impacting various Linux-based systems.
What is the impact of CVE-2026-43043?
The impact of CVE-2026-43043 can lead to a denial of service due to potential system crashes caused by a NULL pointer dereference.
When was CVE-2026-43043 disclosed?
CVE-2026-43043 was disclosed as part of security updates in the Linux kernel addressing vulnerabilities.