In the Linux kernel, the following vulnerability has been resolved:
crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
The SEV platform device can be shutdown with a null psp_master, e.g., using DEBUG_TEST_DRIVER_REMOVE. Found using KASAN:
[ 137.148210] ccp 0000:23:00.1: enabling device (0000 -> 0002) [ 137.162647] ccp 0000:23:00.1: no command queues available [ 137.170598] ccp 0000:23:00.1: sev enabled [ 137.174645] ccp 0000:23:00.1: psp enabled [ 137.178890] general protection fault, probably for non-canonical address 0xdffffc000000001e: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN NOPTI [ 137.182693] KASAN: null-ptr-deref in range [0x00000000000000f0-0x00000000000000f7] [ 137.182693] CPU: 93 PID: 1 Comm: swapper/0 Not tainted 6.8.0-rc1+ #311 [ 137.182693] RIP: 0010:__sev_platform_shutdown_locked+0x51/0x180 [ 137.182693] Code: 08 80 3c 08 00 0f 85 0e 01 00 00 48 8b 1d 67 b6 01 08 48 b8 00 00 00 00 00 fc ff df 48 8d bb f0 00 00 00 48 89 f9 48 c1 e9 03 <80> 3c 01 00 0f 85 fe 00 00 00 48 8b 9b f0 00 00 00 48 85 db 74 2c [ 137.182693] RSP: 0018:ffffc900000cf9b0 EFLAGS: 00010216 [ 137.182693] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 000000000000001e [ 137.182693] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000000000f0 [ 137.182693] RBP: ffffc900000cf9c8 R08: 0000000000000000 R09: fffffbfff58f5a66 [ 137.182693] R10: ffffc900000cf9c8 R11: ffffffffac7ad32f R12: ffff8881e5052c28 [ 137.182693] R13: ffff8881e5052c28 R14: ffff8881758e43e8 R15: ffffffffac64abf8 [ 137.182693] FS: 0000000000000000(0000) GS:ffff889de7000000(0000) knlGS:0000000000000000 [ 137.182693] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.182693] CR2: 0000000000000000 CR3: 0000001cf7c7e000 CR4: 0000000000350ef0 [ 137.182693] Call Trace: [ 137.182693] <TASK> [ 137.182693] ? show_regs+0x6c/0x80 [ 137.182693] ? __die_body+0x24/0x70 [ 137.182693] ? die_addr+0x4b/0x80 [ 137.182693] ? exc_general_protection+0x126/0x230 [ 137.182693] ? asm_exc_general_protection+0x2b/0x30 [ 137.182693] ? __sev_platform_shutdown_locked+0x51/0x180 [ 137.182693] sev_firmware_shutdown.isra.0+0x1e/0x80 [ 137.182693] sev_dev_destroy+0x49/0x100 [ 137.182693] psp_dev_destroy+0x47/0xb0 [ 137.182693] sp_destroy+0xbb/0x240 [ 137.182693] sp_pci_remove+0x45/0x60 [ 137.182693] pci_device_remove+0xaa/0x1d0 [ 137.182693] device_remove+0xc7/0x170 [ 137.182693] really_probe+0x374/0xbe0 [ 137.182693] ? srso_return_thunk+0x5/0x5f [ 137.182693] __driver_probe_device+0x199/0x460 [ 137.182693] driver_probe_device+0x4e/0xd0 [ 137.182693] __driver_attach+0x191/0x3d0 [ 137.182693] ? __pfx___driver_attach+0x10/0x10 [ 137.182693] bus_for_each_dev+0x100/0x190 [ 137.182693] ? __pfx_bus_for_each_dev+0x10/0x10 [ 137.182693] ? __kasan_check_read+0x15/0x20 [ 137.182693] ? srso_return_thunk+0x5/0x5f [ 137.182693] ? _raw_spin_unlock+0x27/0x50 [ 137.182693] driver_attach+0x41/0x60 [ 137.182693] bus_add_driver+0x2a8/0x580 [ 137.182693] driver_register+0x141/0x480 [ 137.182693] __pci_register_driver+0x1d6/0x2a0 [ 137.182693] ? srso_return_thunk+0x5/0x5f [ 137.182693] ? esrt_sysfs_init+0x1cd/0x5d0 [ 137.182693] ? __pfx_sp_mod_init+0x10/0x10 [ 137.182693] sp_pci_init+0x22/0x30 [ 137.182693] sp_mod_init+0x14/0x30 [ 137.182693] ? __pfx_sp_mod_init+0x10/0x10 [ 137.182693] do_one_initcall+0xd1/0x470 [ 137.182693] ? __pfx_do_one_initcall+0x10/0x10 [ 137.182693] ? parameq+0x80/0xf0 [ 137.182693] ? srso_return_thunk+0x5/0x5f [ 137.182693] ? __kmalloc+0x3b0/0x4e0 [ 137.182693] ? kernel_init_freeable+0x92d/0x1050 [ 137.182693] ? kasan_populate_vmalloc_pte+0x171/0x190 [ 137.182693] ? srso_return_thunk+0x5/0x5f [ 137.182693] kernel_init_freeable+0xa64/0x1050 [ 137.182693] ? __pfx_kernel_init+0x10/0x10 [ 137.182693] kernel_init+0x24/0x160 [ 137.182693] ? __switch_to_asm+0x3e/0x70 [ 137.182693] ret_from_fork+0x40/0x80 [ 137.182693] ? __pfx_kernel_init+0x1 ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 26, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftool | Oct 8, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade kernel-symsUpgrade dtb-alteraUpgrade kernel-azure-extraUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-rt_debug-vdsoUpgrade dtb-amdUpgrade kernel-debug-livepatch-develUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-rtUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade dtb-broadcomUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-docsUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rt | Apr 18, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-azureUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-genericUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-starfiveUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-1023-awsUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-nvidia-6.5Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1061-awsUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-gkeUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-azure-cvmUpgrade linux-image-6.5.0-1024-azure | May 17, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub