CVE-2026-23344

crypto: ccp - Fix use-after-free on error path

published March 25, 2026

CVSS
—
EPSS
0%
Percentile
2.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

crypto: ccp - Fix use-after-free on error path

In the error path of sev_tsm_init_locked(), the code dereferences 't'

after it has been freed with kfree(). The pr_err() statement attempts

to access t->tio_en and t->tio_init_done after the memory has been

released.

Move the pr_err() call before kfree(t) to access the fields while the

memory is still valid.

This issue reported by Smatch static analyser

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00125 · 2.0th percentile
Published
2026-03-25T10:27Z
EPSS history
Timeline
  • 25 MAR 10:27Z
    crypto: ccp - Fix use-after-free on error path
    cvelistv5