In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes may create inconsistencies in the internal socket state. Disallow this by adding a new ctx->write field that indiciates exclusive ownership for writing.
CVSS
7.8
EPSS
0%
KEV
Yes
Exploitation
reported
CVE Published
384d ago · NVD
Added to TCL Advisory
43d ago · TCL Advisory
Added to CISA KEV
43d ago · CISA
Exploitation Status Changed
43d ago · TCL Advisory
NVD · Updated 43d ago
CISA KEV · Updated 44d ago