CVE-2026-23344 in Linux Kernel

Сводка (Английский)

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix use-after-free on error path In the error path of sev_tsm_init_locked(), the code dereferences 't' after it has been freed with kfree(). The pr_err() statement attempts to access t->tio_en and t->tio_init_done after the memory has been released. Move the pr_err() call before kfree(t) to access the fields while the memory is still valid. This issue reported by Smatch static analyser

Ответственный

Linux

Резервировать

13.01.2026

Раскрытие

25.03.2026

Записи

VulDB provides additional information and datapoints for this CVE:

ИД	Уязвимость	CWE	Экс	Кон	CVE
353088	Linux Kernel crypto sev_tsm_init_locked повреждение памяти	416	Не определено	Официальное исправление	CVE-2026-23344