The Linux kernel crypto CCP component had a flaw where the failure of page allocation was not correctly checked. The function __snp_alloc_firmware_pages() might return NULL when memory is low, but the code passed this NULL directly to page_address(). On architectures lacking HASHED_PAGE_VIRTUAL, page_address(NULL) returns a deterministic but invalid non-zero virtual address, causing subsequent conditional checks to incorrectly pass and leading to dereferencing an invalid pointer in sev_tsm_init_locked(). The fix involves verifying the page allocation pointer itself for NULL rather than the virtual address returned by page_address().

This vulnerability could lead to dereferencing an invalid pointer, which may cause kernel crashes or undefined behavior. The impact is limited to the Linux kernel's crypto CCP component under specific memory pressure conditions and certain architectures without HASHED_PAGE_VIRTUAL. No known exploits in the wild have been reported.

A fix for this vulnerability has been implemented in the Linux kernel by correcting the NULL pointer check. Users should apply the official kernel updates that include this fix. Since no patch links or vendor advisories are provided here, users should monitor official Linux kernel release notes and update accordingly. Patch status is not yet confirmed in this data — check the vendor advisory for current remediation guidance.