CVE-2026-74403

A flaw was found in the Linux kernel's Cryptographic Co-processor (CCP) driver. Under memory pressure, if a page allocation fails, the driver incorrectly processes the allocation result. This can lead to the dereferencing of an invalid memory address, potentially causing a system crash or other unpredictable behavior.

A MODERATE impact flaw was found in the Linux kernel's Cryptographic Co-processor (CCP) driver. During TIO initialization, __snp_alloc_firmware_pages() may return NULL under memory pressure. On architectures without HASHED_PAGE_VIRTUAL, page_address(NULL) computes a deterministic but invalid, non-zero virtual address, so the subsequent tio_status check evaluates as success and sev_tsm_init_locked() dereferences the invalid pointer, which can crash the kernel. Exploitation requires local access and the ability to induce memory pressure while this initialization path is running, and the consequence is limited to availability (denial of service) with no impact on confidentiality or integrity. All currently assessed Red Hat Enterprise Linux 6 through 10 kernel and kernel-rt streams, as well as Red Hat In-Vehicle OS 2.0 and 2.1 kernels, are not affected because the vulnerable code is not present in the shipped kernel versions. Red Hat rates this flaw MODERATE (CVSS 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), which differs from the CVE.org record's IMPORTANT rating (CVSS 7.8, AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) because Red Hat assesses that only availability is impacted.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.