Description
In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Set merge to zero early in af_alg_sendmsg If an error causes af_alg_sendmsg to abort, ctx->merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into af_alg_sendmsg when it attempts to do a merge that can't be done. Fix this by setting ctx->merge to zero near the start of the loop.
Product status
8ff590903d5fc7f5a0a988c38267a3d08e6393a2 before 6241b9e2809b12da9130894cf5beddf088dc1b8a
8ff590903d5fc7f5a0a988c38267a3d08e6393a2 before 2374c11189ef704a3e4863646369f1b8e6a27d71
8ff590903d5fc7f5a0a988c38267a3d08e6393a2 before 24c1106504c625fabd3b7229611af617b4c27ac7
8ff590903d5fc7f5a0a988c38267a3d08e6393a2 before 045ee26aa3920a47ec46d7fcb302420bf01fd753
8ff590903d5fc7f5a0a988c38267a3d08e6393a2 before 9574b2330dbd2b5459b74d3b5e9619d39299fc6f
2.6.38
Any version before 2.6.38
6.1.154
6.6.108
6.12.49
6.16.9
6.17
References
git.kernel.org/...c/6241b9e2809b12da9130894cf5beddf088dc1b8a
git.kernel.org/...c/2374c11189ef704a3e4863646369f1b8e6a27d71
git.kernel.org/...c/24c1106504c625fabd3b7229611af617b4c27ac7
git.kernel.org/...c/045ee26aa3920a47ec46d7fcb302420bf01fd753
git.kernel.org/...c/9574b2330dbd2b5459b74d3b5e9619d39299fc6f
