CVE Database›Document archive›CVE-2025-39789

CVE-2025-39789

kernel: crypto: x86/aegis - Add missing error checks

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · September 11, 2025

Updated · October 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: x86/aegis - Add missing error checks

The skcipher_walk functions can allocate memory and can fail, so checking for errors is necessary.

Statement

This vulnerability presents minimal operational risk to Red Hat environments because the affected cryptographic cipher is not enabled in supported kernels. On upstream Linux systems, omitting error checks during memory allocation in AEGIS-128 cipher operations could allow a local user to cause system instability. Red Hat Enterprise Linux kernel builds do not compile the vulnerable x86 AEGIS-128 module, leaving default installations unaffected.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified