In the Linux kernel, the following vulnerability has been resolved:
crypto: ccp - Fix crash when rebind ccp device for ccp.ko
When CONFIG_CRYPTO_DEV_CCP_DEBUGFS is enabled, rebinding the ccp device causes the following crash:
$ echo '0000:0a:00.2' > /sys/bus/pci/drivers/ccp/unbind $ echo '0000:0a:00.2' > /sys/bus/pci/drivers/ccp/bind
[ 204.976930] BUG: kernel NULL pointer dereference, address: 0000000000000098 [ 204.978026] #PF: supervisor write access in kernel mode [ 204.979126] #PF: error_code(0x0002) - not-present page [ 204.980226] PGD 0 P4D 0 [ 204.981317] Oops: Oops: 0002 [#1] SMP NOPTI ... [ 204.997852] Call Trace: [ 204.999074] <TASK> [ 205.000297] start_creating+0x9f/0x1c0 [ 205.001533] debugfs_create_dir+0x1f/0x170 [ 205.002769] ? srso_return_thunk+0x5/0x5f [ 205.004000] ccp5_debugfs_setup+0x87/0x170 [ccp] [ 205.005241] ccp5_init+0x8b2/0x960 [ccp] [ 205.006469] ccp_dev_init+0xd4/0x150 [ccp] [ 205.007709] sp_init+0x5f/0x80 [ccp] [ 205.008942] sp_pci_probe+0x283/0x2e0 [ccp] [ 205.010165] ? srso_return_thunk+0x5/0x5f [ 205.011376] local_pci_probe+0x4f/0xb0 [ 205.012584] pci_device_probe+0xdb/0x230 [ 205.013810] really_probe+0xed/0x380 [ 205.015024] __driver_probe_device+0x7e/0x160 [ 205.016240] device_driver_attach+0x2f/0x60 [ 205.017457] bind_store+0x7c/0xb0 [ 205.018663] drv_attr_store+0x28/0x40 [ 205.019868] sysfs_kf_write+0x5f/0x70 [ 205.021065] kernfs_fop_write_iter+0x145/0x1d0 [ 205.022267] vfs_write+0x308/0x440 [ 205.023453] ksys_write+0x6d/0xe0 [ 205.024616] __x64_sys_write+0x1e/0x30 [ 205.025778] x64_sys_call+0x16ba/0x2150 [ 205.026942] do_syscall_64+0x56/0x1e0 [ 205.028108] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 205.029276] RIP: 0033:0x7fbc36f10104 [ 205.030420] Code: 89 02 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8d 05 e1 08 2e 00 8b 00 85 c0 75 13 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 f3 c3 66 90 41 54 55 49 89 d4 53 48 89 f5
This patch sets ccp_debugfs_dir to NULL after destroying it in ccp5_debugfs_destroy, allowing the directory dentry to be recreated when rebinding the ccp device.
Tested on AMD Ryzen 7 1700X.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 8, 2025 | Sep 8, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Dec 12, 2025 | Dec 11, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Aug 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 19, 2025 |
| Suse | — | Upgrade kernel-rt-extraUpgrade dtb-socionextUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade dtb-amdUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade kernel-develUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kernel-source-rtUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-amazonUpgrade dtb-appleUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kernel-rt-develUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qa | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-xilinxUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04Upgrade linux-image-kvm-5.15Upgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-fips-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-aws-64k-6.14Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-awsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-fips-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-virtual-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-6.8Upgrade linux-image-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-raspi-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-intelUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-nvidia-64kUpgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-lts-22.04 | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Aug 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub