In the Linux kernel, the following vulnerability has been resolved:
crypto: ccp - Fix crash when rebind ccp device for ccp.ko
When CONFIG_CRYPTO_DEV_CCP_DEBUGFS is enabled, rebinding the ccp device causes the following crash:
$ echo '0000:0a:00.2' > /sys/bus/pci/drivers/ccp/unbind $ echo '0000:0a:00.2' > /sys/bus/pci/drivers/ccp/bind
[ 204.976930] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 204.978026] #PF: supervisor write access in kernel mode [ 204.979126] #PF: error_code(0x0002) - not-present page [ 204.980226] PGD 0 P4D 0 [ 204.981317] Oops: Oops: 0002 [#1] SMP NOPTI ... [ 204.997852] Call Trace: [ 204.999074] <TASK> [ 205.000297] start_creating+0x9f/0x1c0 [ 205.001533] debugfs_create_dir+0x1f/0x170 [ 205.002769] ? srso_return_thunk+0x5/0x5f [ 205.004000] ccp5_debugfs_setup+0x87/0x170 [ccp] [ 205.005241] ccp5_init+0x8b2/0x960 [ccp] [ 205.006469] ccp_dev_init+0xd4/0x150 [ccp] [ 205.007709] sp_init+0x5f/0x80 [ccp] [ 205.008942] sp_pci_probe+0x283/0x2e0 [ccp] [ 205.010165] ? srso_return_thunk+0x5/0x5f [ 205.011376] local_pci_probe+0x4f/0xb0 [ 205.012584] pci_device_probe+0xdb/0x230 [ 205.013810] really_probe+0xed/0x380 [ 205.015024] __driver_probe_device+0x7e/0x160 [ 205.016240] device_driver_attach+0x2f/0x60 [ 205.017457] bind_store+0x7c/0xb0 [ 205.018663] drv_attr_store+0x28/0x40 [ 205.019868] sysfs_kf_write+0x5f/0x70 [ 205.021065] kernfs_fop_write_iter+0x145/0x1d0 [ 205.022267] vfs_write+0x308/0x440 [ 205.023453] ksys_write+0x6d/0xe0 [ 205.024616] __x64_sys_write+0x1e/0x30 [ 205.025778] x64_sys_call+0x16ba/0x2150 [ 205.026942] do_syscall_64+0x56/0x1e0 [ 205.028108] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 205.029276] RIP: 0033:0x7fbc36f10104 [ 205.030420] Code: 89 02 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8d 05 e1 08 2e 00 8b 00 85 c0 75 13 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 f3 c3 66 90 41 54 55 49 89 d4 53 48 89 f5
This patch sets ccp_debugfs_dir to NULL after destroying it in ccp5_debugfs_destroy, allowing the directory dentry to be recreated when rebinding the ccp device.
Tested on AMD Ryzen 7 1700X.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 8, 2025 | Sep 8, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Dec 12, 2025 | Dec 11, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Aug 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 19, 2025 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-develUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-rt-livepatchUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade dtb-socionextUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-xilinxUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-debugUpgrade dtb-freescaleUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade dtb-armUpgrade dtb-lgUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azure | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gke-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-6.14Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-fips-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-azure-cvmUpgrade linux-image-virtual-6.14Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-xilinxUpgrade linux-image-azure-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-realtime-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-ibm-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-azure-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-64kUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-fips-6.8Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-intelUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-ibm-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-oem-20.04bUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-azureUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-tegraUpgrade linux-image-gke-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gkeopUpgrade linux-image-aws-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-genericUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-aws-5.15Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-fipsUpgrade linux-image-azure-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-generic-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Aug 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub