CVE-2025-39789

MEDIUM

Linux Kernel - crypto/x86/aegis - Buffer Overflow

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: x86/aegis - Add missing error checks The skcipher_walk functions can allocate memory and can fail, so checking for errors is necessary.

Scores

CVSS v3 5.5
EPSS 0.0012
EPSS Percentile 2.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (8)
linux/Kernel 4.18.0 - 6.16.4linux
Linux/Linux < 4.18
Linux/Linux 1d373d4e8e15b358f08de52956b32e0e38a11f84 - 3d9eb180fbe8828cce43bce4c370124685b205c3
Linux/Linux 1d373d4e8e15b358f08de52956b32e0e38a11f84 - 475104178f4d30e749ee4f5473c87f692b93bebb
Linux/Linux 4.18
Linux/Linux 6.16.4 - 6.16.*
Linux/Linux 6.17
linux/linux_kernel 4.18 - 6.16.4
Published Sep 11, 2025
Tracked Since Feb 18, 2026