CVE-2026-43043

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> crypto: af-alg - fix NULL pointer dereference in scatterwalk<br /> <br /> The AF_ALG interface fails to unmark the end of a Scatter/Gather List (SGL)<br /> when chaining a new af_alg_tsgl structure. If a sendmsg() fills an SGL<br /> exactly to MAX_SGL_ENTS, the last entry is marked as the end. A subsequent<br /> sendmsg() allocates a new SGL and chains it, but fails to clear the end<br /> marker on the previous SGL&amp;#39;s last data entry.<br /> <br /> This causes the crypto scatterwalk to hit a premature end, returning NULL<br /> on sg_next() and leading to a kernel panic during dereference.<br /> <br /> Fix this by explicitly unmarking the end of the previous SGL when<br /> performing sg_chain() in af_alg_alloc_tsgl().