In the Linux kernel, the CCP crypto module fails to initialise the Intel SEV SNP feature during the ioctl(SNP_CONFIG) call, which can still be invoked by userspace. The call can zero the global MSR_VM_HSAVE_PA register; on the next VM run the host attempts to use the cleared register and triggers a general protection fault, causing a kernel panic. The flaw represents a denial‑of‑service weakness (CWE‑455).

Any system running a Linux kernel that includes the CCP module and a loaded KVM subsystem may be affected. Specific version information is not available in the entry, so all kernel releases containing the CCP SNP code prior to the fix should be considered vulnerable.

The EPSS score is below 1% and the vulnerability is not listed in the CISA KEV catalog, indicating a low likelihood of widespread exploitation. However, the impact if exploited is severe, as the host crashes. Attackers would need access to the /dev/sev device and the ability to issue ioctl requests—typically requiring elevated privileges—but a local user could trigger the failure by invoking standard SEV ioctls such as SEV_PDH_GEN after SEV initialization has failed. The simplest exploit path involves calling ioctl(SNP_CONFIG) again after a failed initialization while KVM is loaded to zero the register and crash on the next VMRUN.