Vulnerability of the cc_cipher_exit() function in the drivers/crypto/ccree/cc_cipher.c module – The driver for the Linux kernel’s cryptographic accelerator, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

🗓️ 01 Sep 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Cc_cipher_exit flaw in ccree driver reuses freed memory, risking confidentiality, integrity, and accessibility.

Reporter	Title	Published	Views	Family All 29
AstraLinux	Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15	19 Jun 202611:10	–	astralinux
Circl	CVE-2022-49258	27 Feb 202518:27	–	circl
CNNVD	Linux kernel 安全漏洞	26 Feb 202500:00	–	cnnvd
CVE	CVE-2022-49258	26 Feb 202501:56	–	cve
Cvelist	CVE-2022-49258 crypto: ccree - Fix use after free in cc_cipher_exit()	26 Feb 202501:56	–	cvelist
Debian CVE	CVE-2022-49258	26 Feb 202501:56	–	debiancve
EUVD	EUVD-2022-54968	3 Oct 202520:07	–	euvd
NVD	CVE-2022-49258	26 Feb 202507:01	–	nvd
OSV	CVE-2022-49258 crypto: ccree - Fix use after free in cc_cipher_exit()	26 Feb 202501:56	–	osv
OSV	DEBIAN-CVE-2022-49258	26 Feb 202507:01	–	osv

Source	Link
cve	www.cve.org/CVERecord
git	www.git.kernel.org/stable/c/c93017c8d5ebf55a4e453ac7c84cc84cf92ab570
git	www.git.kernel.org/stable/c/335bf1fc74f775a8255257aa3e33763f2257b676
git	www.git.kernel.org/stable/c/25c358efee5153dfd240d4e0d3169d5bebe9cacd
git	www.git.kernel.org/stable/c/cffb5382bd8d3cf21b874ab5b84bf7618932286b
lore	www.lore.kernel.org/linux-cve-announce/2025022628-CVE-2022-49258-0dd7@gregkh/
git	www.git.kernel.org/linus/3d950c34074ed74d2713c3856ba01264523289e6
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.110
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.33
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.19

01 Sep 2025 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 26.8

CVSS 37.8

EPSS0.00246

cipher exit flaw ccree driver memory reuse linux kernel security risk