CVE-2026-80652

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the crypto CCP module when handling a PDH export. The system fails to properly account for a zero-length userspace cert chain buffer, which should be treated as a request to query the length of relevant blobs. When CONFIG DEBUG VIRTUAL=y is enabled, this failure triggers a BUG ON() because the system attempts to retrieve the physical address of a ZERO SIZE PTR returned by kzalloc() during a bogus allocation. The issue is triggered within the sev ioctl do pdh export() function. Outside of the specific debug configuration, the issue is considered benign as the PSP errors out before writing to an invalid address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.