diff --git a/security/samhain/files/patch-src_sh__checksum.c b/security/samhain/files/patch-src_sh__checksum.c
new file mode 100644
index 0000000000000..2f6a603aeb242
--- /dev/null
+++ b/security/samhain/files/patch-src_sh__checksum.c
@@ -0,0 +1,11 @@
+--- src/sh_checksum.c.orig	2024-01-27 14:26:35 UTC
++++ src/sh_checksum.c
+@@ -468,7 +468,7 @@ void SHA256_Final(sha2_byte digest[], SHA256_CTX* cont
+       }
+     }
+ #else
+-    memset(d, context->state, SHA256_DIGEST_LENGTH);
++    memcpy(d, context->state, SHA256_DIGEST_LENGTH);
+     /* bcopy(context->state, d, SHA256_DIGEST_LENGTH); */
+ #endif
+   }