Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak For certain sev ioctl interfaces, input values may be provided that are less than or equal to SEVFWBLOBMAXSIZE, but larger than the data returned by...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

CVE-2026-80652

A flaw was found in the Linux kernel's Cryptographic Co-processor CCP driver. A local attacker could trigger a kernel crash, leading to a denial of service DoS, by providing a zero-length certificate chain buffer during a Platform Dynamic Hardware PDH export operation. This issue specifically...

kernel: crypto: ccp - copy IV using skcipher ivsize

A flaw was found in the Linux kernel's cryptographic coprocessor CCP driver. When processing AFALG rfc3686-ctr-aes-ccp requests, the ccpaescomplete function attempts to restore more data than the allocated buffer for the Initialization Vector IV can hold. This leads to a buffer overrun, which can...

CVE-2026-80652

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

EUVD-2026-67528

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the...

Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to unlimited resource allocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux kernel crypto accelerator driver Heap Buffer Overflow DoS

The vulnerability in the f81604readintcallback function within the drivers/crypto/ccp/sev-dev-tsm.c module of the Linux kernel cryptographic accelerator driver is related to insufficient logging. Exploitation of this vulnerability may allow a remote attacker to compromise the confidentiality,...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to incomplete filtering of special elements. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel crypto accelerator DoS

The vulnerability in the f81604readintcallback function within the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper memory deallocation “memory leak”. Exploitation of this vulnerability may allow an attacker to cause a denial of...

Linux kernel crypto accelerator driver Heap Buffer Overflow DoS

The vulnerability in the f81604readintcallback function within the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to access to an uninitialized pointer. Exploitation of this vulnerability may allow an attacker to compromise the confidentialit...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability could allow an attacker to cause a system...

Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise...

Linux kernel crypto accelerator driver Heap Buffer Overflow DoS

The vulnerability in the f81604readintcallback function within the drivers/crypto/ccp/sev-dev-tsm.c module of the Linux kernel cryptographic accelerator driver is related to buffer overflow conditions. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality,...