CVE-2026-74403

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the crypto: ccp component where page allocation failures are not correctly handled in TIO. When snp alloc firmware pages() returns NULL due to memory pressure, passing this result directly to page address() on architectures without HASHED PAGE VIRTUAL can result in a deterministic but invalid non-zero virtual address. This causes the tio status check to evaluate as true, leading the sev tsm init locked() function to dereference an invalid pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.