CVE-2026-31699: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In the Linux kernel crypto ccp sev-dev path (sev_ioctl_do_pek_csr / SEV ioctl handling), change logic so that when the underlying PSP/firmware command fails, the driver does not attempt to copy the PEK CSR blob to userspace (avoids the slab out-of-bounds during copy_to_user/_copy_to_user).
crypto: ccp (sev-dev) PEK CSR copying behavior = Do not attempt to copy the PEK CSR/CSR blob to userspace when the PSP/firmware command failed
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31699?
CVE-2026-31699 has been classified with a moderate severity level due to potential issues in the Linux kernel's handling of certain commands.
How do I fix CVE-2026-31699?
To fix CVE-2026-31699, you should update your Linux kernel to the latest version that addresses this vulnerability.
What systems are affected by CVE-2026-31699?
CVE-2026-31699 affects multiple versions of the Linux kernel, particularly between version 4.16 and certain releases of version 7.1.
What kind of vulnerability is CVE-2026-31699?
CVE-2026-31699 is a vulnerability related to the crypto subsystem in the Linux kernel, specifically concerning command handling failures.
Is there any exploit known for CVE-2026-31699?
As of now, there are no public exploits reported for CVE-2026-31699, but it is advisable to apply the necessary patches to mitigate potential risks.