AZL-68460
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-68460.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-68460
- Upstream
- Published
- 2025-10-13T14:15:34Z
- Modified
- 2026-04-01T05:21:25.521357Z
- Summary
- CVE-2025-39964 affecting package kernel for versions less than 6.6.112.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
crypto: afalg - Disallow concurrent writes in afalg_sendmsg
Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencies in the internal socket state.
Disallow this by adding a new ctx->write field that indiciates exclusive ownership for writing.
- References