CVE-2026-31697: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
Published May 1, 2026
·Updated
crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
Affected Software
8 affected componentsFixes available
Linux Linux kernel
Microsoft azl3 kernel 6.6.134.1-2
Linux Linux kernel>=5.2<6.6.136
Linux Linux kernel>=6.7<6.12.84
Linux Linux kernel>=6.13<6.18.25
Linux Linux kernel>=6.19<7.0.2
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
Event History
May 1, 2026
CVE Published
via MITRE·01:55 PM
Data Sourced
via MITRE·01:55 PM
DescriptionSeverity
Data Sourced
via NVD·02:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 2, 2026
Data Sourced
via Microsoft·08:03 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-31697?
CVE-2026-31697 is classified as a moderate-severity vulnerability in the Linux kernel.
2
How do I fix CVE-2026-31697?
To fix CVE-2026-31697, upgrade your Linux kernel to a version that is fixed and not vulnerable.
3
Which versions of the Linux kernel are affected by CVE-2026-31697?
CVE-2026-31697 affects several versions of the Linux kernel, specifically those prior to the patched versions including 6.6.136 and others.
4
Is CVE-2026-31697 exploitable remotely?
CVE-2026-31697 is not categorized as remotely exploitable; it requires local access to exploit.
5
What component of the system does CVE-2026-31697 impact?
CVE-2026-31697 impacts the crypto component of the Linux kernel, specifically related to command execution.