Threats tagged 'ghsa-rfcq-q5wv-mpcg'

A vulnerability in the Linux kernel's crypto subsystem (af_alg) could cause a crash due to improper handling of the ctx->merge variable when af_alg_sendmsg aborts. The issue arises because ctx->merge may retain a garbage value from a previous loop iteration, leading to a crash on subsequent calls. The fix involves setting ctx->merge to zero early in the processing loop to prevent this condition.