CVE-2026-45959

A flaw was found in the Linux kernel's crypto: ccp module. An incorrect cleanup usage of the kfree function, which is used for memory deallocation, with a local pointer variable could lead to an invalid deallocation of a stack address. This issue can result in a system crash, causing a Denial of Service (DoS).

This vulnerability is rated as Moderate severity because it requires local access on systems equipped with AMD Cryptographic Coprocessor hardware and primarily causes a denial of service via a kernel crash. The flaw occurs due to an invalid stack address deallocation during cleanup operations within the CCP subsystem. Earlier Red Hat Enterprise Linux releases are not affected as they do not include the underlying cleanup attribute implementation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.