CVE-2025-39931

HIGH

Linux Kernel 2.6.38-6.1.153, 6.2.0-6.6.107, 6.7.0-6.12.48, 6.13.0-6.16.8 - Use-After-Free in AF_ALG Send Message

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Set merge to zero early in af_alg_sendmsg If an error causes af_alg_sendmsg to abort, ctx->merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into af_alg_sendmsg when it attempts to do a merge that can't be done. Fix this by setting ctx->merge to zero near the start of the loop.

References (9)

Core 9

Scores

CVSS v3 7.8
EPSS 0.0015
EPSS Percentile 4.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-908
Status published
Products (25)
linux/Kernel 2.6.38 - 5.10.260linux
linux/Kernel 2.6.38 - 6.1.154linux
linux/Kernel 5.11.0 - 5.15.211linux
linux/Kernel 5.16.0 - 6.1.154linux
linux/Kernel 6.13.0 - 6.16.9linux
linux/Kernel 6.2.0 - 6.6.108linux
linux/Kernel 6.7.0 - 6.12.49linux
Linux/Linux < 2.6.38
Linux/Linux 2.6.38
Linux/Linux 5.10.260 - 5.10.*
... and 15 more
Published Oct 04, 2025
Tracked Since Feb 18, 2026