CVE-2026-23344 crypto: ccp - Fix use-after-free on error path
A use-after-free vulnerability in the Linux kernel's CCP crypto driver allows attackers to cause a denial of service or potentially execute code via error path handling.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-23344?
CVE-2026-23344 is a high-severity use after free vulnerability in Linux kernel, published on 25 Mar 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
crypto: ccp - Fix use-after-free on error path
In the error path of sev_tsm_init_locked(), the code dereferences 't' after it has been freed with kfree(). The pr_err() statement attempts to access t->tio_en and t->tio_init_done after the memory has been released.
Move the pr_err() call before kfree(t) to access the fields while the memory is still valid.
This issue reported by Smatch static analyser
Weakness: CWE-416
Which versions are affected by CVE-2026-23344?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-23344?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2026-23344 being exploited?
There is no known exploitation of CVE-2026-23344 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2026-23344, GHSA-466m-2wp7-q9q9, ROOT-OS-UBUNTU-2204-CVE-2026-23344, ROOT-OS-UBUNTU-2404-CVE-2026-23344, UBUNTU-CVE-2026-23344.