CVE-2025-39729
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In the Linux kernel, the crypto/ccp driver (sev-dev.c) has a bug where an uninitialized error pointer is dereferenced in __sev_platform_init_locked(). This can lead to unpredictable system behavior.
Risk Assessment
The risk includes potential system crashes or incorrect operation of cryptographic mechanisms, which may affect data security.
Recommendation
Update the Linux kernel to a version containing the fix for this bug (commit removing the uninitialized pointer dereference).
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix dereferencing uninitialized error pointer Fix below smatch warnings: drivers/crypto/ccp/sev-dev.c:1312 __sev_platform_init_locked() error: we previously assumed 'error' could be null