Riskcovery

CVE-2025-39789

crypto: x86/aegis - Add missing error checks

State
Published
Severity
7.3 High
Published
Sep 11, 2025
Updated
Oct 21, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: x86/aegis - Add missing error checks

The skcipher_walk functions can allocate memory and can fail, so checking for errors is necessary.

Scores

CVSSScoreVectorSource
3.17.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:LLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1d373d4e8e15b358f08de52956b32e0e38a11f84 to before 74d3b91f1598eedf87a977702f9f55e32698206dAffected
  • 1d373d4e8e15b358f08de52956b32e0e38a11f84 to before b4ba650125d21e937f82fcafcd2738fe31209c05Affected
  • 1d373d4e8e15b358f08de52956b32e0e38a11f84 to before 475104178f4d30e749ee4f5473c87f692b93bebbAffected
  • 1d373d4e8e15b358f08de52956b32e0e38a11f84 to before 3d9eb180fbe8828cce43bce4c370124685b205c3Affected
LinuxLinux
  • 4.18Affected
  • before 4.18Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.16.4 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.