CVE-2026-31698

A flaw was found in the Linux kernel's crypto subsystem, specifically within the ccp driver. A local user could exploit this vulnerability when attempting to retrieve the Platform DH (PDH) certificate. If a firmware command fails due to an invalid length, the driver may attempt to copy data to userspace, leading to a kernel-allocated buffer overflow. This issue can result in the disclosure of sensitive information to the local user.

Same class as other CCP fixes: avoid copying PDH certificate material to userspace after a failed PSP operation, which could leak indeterminate firmware buffer contents. Red Hat recommends updated kernels on AMD CCP-enabled hosts.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.