CVE-2026-23344

kernel: crypto: ccp - Fix use-after-free on error path

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · March 25, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's crypto: ccp module. A use-after-free vulnerability exists in the sev_tsm_init_locked() function's error handling path. This occurs when the system attempts to access memory that has already been released, leading to a memory corruption vulnerability. This could potentially result in system instability or a denial of service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference