CVE-2026-31699

A flaw was found in the Linux kernel's crypto: ccp module. A local user could exploit a vulnerability where the system attempts to copy a Certificate Signing Request (CSR) to userspace even after a Platform Security Processor (PSP) command has failed. This can lead to a slab-out-of-bounds write, causing an overflow of the kernel-allocated buffer and potentially leaking sensitive kernel data to the user.

CSR buffers must not be copied to userspace when the underlying PSP CSR command did not succeed; upstream blocks the copy on failure. Red Hat classifies this as confidentiality hardening for the AMD CCP interface.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.