The Linux kernel’s crypto Tegra CCM implementation previously failed to propagate an allocation failure properly. When the request buffer allocation failed inside tegra_ccm_do_one_req, the function returned an undefined value instead of the accurate ENOMEM error code. This undefined return could allow malicious input or memory pressure conditions to break the normal error flow, potentially leading to kernel crashes or memory corruption because the caller may misinterpret the result. The patch guarantees that an ENOMEM error is returned, preventing the ambiguous outcome.

Affected systems include the Linux kernel across all distributions that use the default Tegra CCM crypto implementation. The advisory does not specify exact kernel versions, so any kernel version that has not yet incorporated the tegra_ccm allocation failure fix is potentially vulnerable.

While no CVSS or EPSS score is published and the vulnerability is not listed in the CISA KEV catalog, the nature of the bug suggests it could be invoked through crafted inputs or high memory pressure to trigger a kernel crash. Without documented exploit evidence, the risk is deemed moderate to high, warranting immediate attention. The absence of an exploit in public feeds mitigates urgency somewhat, but the potential for denial of service remains significant.