The Linux kernel's crypto CCP module contained an off-by-one heap buffer overflow vulnerability in the snp_filter_reserved_mem_regions() function. The vulnerability arose because the bounds check did not properly account for the size of the entry being written. Specifically, when range_list->num_elements was 255, the calculation allowed writing 4 bytes beyond the allocated PAGE_SIZE buffer, causing an overflow. The fix involved modifying the bounds check to include the entry about to be written, thereby preventing the overflow condition.

This vulnerability could lead to a heap buffer overflow in the Linux kernel's crypto CCP component. Such a flaw may cause memory corruption, potentially leading to system instability or escalation of privileges if exploited. However, no known exploits in the wild have been reported. The exact impact depends on the kernel configuration and usage of the affected function.

A fix for this vulnerability has been implemented in the Linux kernel by correcting the bounds check in snp_filter_reserved_mem_regions(). Users and administrators should apply the official kernel updates that include this fix once available. Patch status is not yet confirmed; check the vendor advisory for current remediation guidance.