The vulnerability resides in the Linux kernel’s CCP crypto module, where the code fails to validate that the page allocator returned a valid page. When __snp_alloc_firmware_pages() returns NULL during low‑memory conditions, the subsequent call to page_address(NULL) can produce a non‑null garbage virtual address. The code then proceeds to dereference that address during TSM initialization, leading to a kernel panic. This null‑pointer dereference causes a system‑wide denial of service, crashing the kernel and requiring a reboot.

This flaw is present in all Linux kernel releases that include the unlocked CCP crypto implementation without the commit that adds the allocation null check. All active distributions that ship the affected kernel branch are impacted. Because the exact kernel version list is not provided, administrators should verify whether their kernel revision contains commit 17e1aae… or an equivalent patch.

With a CVSS score of 7.8, the vulnerability is rated high severity, but its EPSS score is < 1%, indicating a very low real‑world exploitation probability at this time. The issue is not listed in CISA's KEV catalog. The likely attack vector involves inducing a memory pressure state that causes the page allocator to return NULL, which is typically achievable by local processes or through sustained high‑memory usage. Based on the description, it is inferred that remote exploitation is unlikely unless the attacker can affect the local memory situation, as the vulnerability is triggered by a runtime condition rather than an external network request.