CVE-2025-39789

CVE-2025-39789

High · published September 11, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

crypto: x86/aegis - Add missing error checks

The skcipher_walk functions can allocate memory and can fail, so

checking for errors is necessary.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.4th percentile
Published
2025-09-11T21:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel≥ 4.18, < 6.16.46.16.4
References (4)
https://git.kernel.org/stable/c/3d9eb180fbe8828cce43bce4c370124685b205c3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/475104178f4d30e749ee4f5473c87f692b93bebb · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/74d3b91f1598eedf87a977702f9f55e32698206d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b4ba650125d21e937f82fcafcd2738fe31209c05 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 11 SEP 16:56Z
    crypto: x86/aegis - Add missing error checks
    cvelistv5