CVE-2026-31698: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Update the kernel so that when retrieving/exporting the PDH certificate, the code path does not attempt to copy the certificate blobs to userspace if the PSP command/firmware command failed. (Text corresponds to: “When retrieving the PDH cert, don't attempt to copy the blobs to userspace” and “crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed”.)
Linux kernel crypto: ccp (sev-dev) Copy PDH cert blobs to userspace = Do not copy PDH cert blobs to userspace when the PSP firmware command fails
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31698?
CVE-2026-31698 has a medium severity rating due to the potential for information leaks in affected Linux kernel versions.
How do I fix CVE-2026-31698?
To mitigate CVE-2026-31698, users should upgrade to a patched version of the Linux kernel that resolves this vulnerability.
Which Linux kernel versions are affected by CVE-2026-31698?
CVE-2026-31698 affects multiple versions of the Linux kernel, specifically those prior to the fixes applied in later releases.
Is CVE-2026-31698 a remote vulnerability?
CVE-2026-31698 is not considered a remote vulnerability as it requires local access to exploit.
What components are involved in the CVE-2026-31698 vulnerability?
The CVE-2026-31698 vulnerability specifically involves the crypto and ccp components within the Linux kernel.