CVE-2025-39789
BaseFortify
Publication date: 2025-09-11
Last updated on: 2025-11-25
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | From 5.15.160 (inc) to 5.16 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-NVD-CWE-noinfo |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in the Linux kernel involves missing error checks in the crypto subsystem, specifically in the x86/aegis implementation. The skcipher_walk functions can allocate memory and may fail during this process, but the error conditions were not properly checked, which could lead to unexpected behavior or system instability.
How can this vulnerability impact me? :
If the error checks are missing when memory allocation fails in the skcipher_walk functions, it could cause the system to behave unpredictably, potentially leading to crashes or security issues related to cryptographic operations.