CVE-2025-39964

CVE-2025-39964 is a Linux kernel vulnerability in the crypto/af_alg.c component. Issuing two concurrent writes to the same af_alg socket allows data to be interleaved unpredictably and creates inconsistencies in the internal socket state. The fix introduces a ctx->write field to enforce exclus...

CVE-2025-39964 crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Disallow concurrent writes in afalgsendmsg Issuing two writes to the same afalg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencie...