Local privilege escalation via concurrent AF_ALG writes

Improper input validation in Linux and affected Siemens controllers allows local users to corrupt kernel memory through concurrent AF_ALG writes. af_alg_sendmsg accepts simultaneous writes on one socket without exclusive ownership, so interleaved data can underflow scatterlist state and expose, overwrite, or crash kernel memory. Local users with access to the AF_ALG socket family can drive both sides of the race without user interaction, yielding kernel-memory disclosure, a controlled write suitable for privilege escalation, or a system panic.