CVE-2025-39789
kernel: crypto: x86/aegis - Add missing error checks
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · September 11, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: x86/aegis - Add missing error checks
The skcipher_walk functions can allocate memory and can fail, so checking for errors is necessary.
Statement
This vulnerability presents minimal operational risk to Red Hat environments because the affected cryptographic cipher is not enabled in supported kernels. On upstream Linux systems, omitting error checks during memory allocation in AEGIS-128 cipher operations could allow a local user to cause system instability. Red Hat Enterprise Linux kernel builds do not compile the vulnerable x86 AEGIS-128 module, leaving default installations unaffected.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified