CVE-2025-39789: crypto: x86/aegis - Add missing error checks
Modified
AliasesUBUNTU-CVE-2025-39789DEBIAN-CVE-2025-39789CGA-22g3-vh7x-x6fqCGA-22p3-rgg7-72f8CGA-24rg-vq4p-mm47CGA-2m58-722c-jqxvCGA-2v6w-f367-m2h6CGA-2xqm-ph36-mvjgCGA-36rw-gh2r-j2xwCGA-38ch-92p9-95f3CGA-3g77-w23f-43w5CGA-3rj4-h73p-crw7CGA-3vjx-jhhc-ppp5CGA-3wcj-9c82-wh5qCGA-47vv-j9cx-4jxhCGA-48jr-674j-jqgpCGA-4fx9-9jf9-836xCGA-4x74-cmjr-pxqwCGA-564j-99xq-wg6vCGA-58x8-hmr5-4qh3CGA-5jxj-grh7-37mrCGA-5xc9-pvr3-96gfCGA-66fq-mg7h-84vwCGA-673m-jxf5-hpm2CGA-67g6-gwc8-rfxrCGA-6pf6-5mq8-hmh6CGA-6q4x-6545-wfw4CGA-6q8j-f8rh-m5wgCGA-6rq2-42w3-86vhCGA-6v52-mppp-q375CGA-6v76-jmjq-442qCGA-742f-8r24-q2fwCGA-74mj-jfwf-c3mcCGA-7h2w-qfm7-95g3CGA-7hwq-p9hr-425gCGA-7jr5-x82x-rcgvCGA-7rpp-p8j6-qjjrCGA-7wm4-66xj-ghg9CGA-83fh-f2x3-qw24CGA-84m4-c389-23jfCGA-8j9x-83pj-gh59CGA-8jhq-5mh4-2qwhCGA-99m3-h3mv-vww9CGA-9ff7-r4qr-cwhmCGA-c6ww-8cv5-49wxCGA-cmx7-8vhm-g78jCGA-f2fh-4mw7-5p93CGA-f565-w4xr-7vj7CGA-f6x9-4xrc-chqrCGA-f85f-hrcm-fvfmCGA-fm7j-fwgc-3hxmCGA-fr79-3mw7-9x9hCGA-fv4w-jxr8-2x9rCGA-fvf8-wvwv-5fjvCGA-g28p-jg7c-49xqCGA-g2vf-r37g-7pmmCGA-g66g-2xxj-46cjCGA-gjrg-cj7g-v53xCGA-gv9m-g4v4-h7jwCGA-h9hw-9j9c-w85pCGA-hg2p-4hpq-cxj9CGA-hj5p-9r2h-5ggrCGA-hjq7-7h88-c2qfCGA-hp2w-vm8f-qjfwCGA-hr2r-x2h9-44mwCGA-hwf2-fj4c-67jjCGA-j49g-jxqx-9c5mCGA-j5c6-8cr9-828wCGA-j5cg-mv8x-6hh6CGA-j64c-7r57-9vq3CGA-j89p-gfmm-5r3cCGA-jghj-c3m2-gm3vCGA-jjgm-ph22-p77hCGA-jjv5-qvfw-h8ffCGA-jx44-9g7h-7q9jCGA-jx75-2f29-hrmcCGA-m5vr-r4mp-pw94CGA-mfpw-2w5q-f35pCGA-mg4x-5rvc-w9xwCGA-mjw2-6gxf-9ch9CGA-mjw6-2fg6-9fv6CGA-p4xj-f7xc-44vfCGA-p62q-p9vc-cq82CGA-p679-r5mm-9gj2CGA-p6jh-m269-pq2mCGA-phf8-j526-jqwrCGA-pw7g-p2xq-r6f6CGA-pwv3-c8m6-qqvpCGA-px4g-xjm3-7fg2CGA-pxv9-4jw4-2rfmCGA-q4pr-3xvr-g4hcCGA-q826-mmm5-hjfmCGA-qh7x-3wg6-j3m8CGA-qjgv-f8wp-7698CGA-r35x-c65v-2ch9CGA-r4r7-c3rv-h73hCGA-r6g4-7g65-v732CGA-rj88-hvjj-48j2CGA-rjx6-gmfc-5597CGA-rr5w-fc4w-7855CGA-rw72-px2r-262jCGA-rx2v-pgrj-p4qhCGA-vf5c-gf67-q938CGA-vhj7-v72h-vcxpCGA-vp8c-4wqv-36mcCGA-vw8c-hvcc-46hjCGA-w382-g6xm-r6w4CGA-w65r-wqh9-42xhCGA-wfp4-mqgx-wf3hCGA-wjxm-3r49-mrh8CGA-wpmw-hf86-xx48CGA-wqx6-h724-47m2CGA-wx2p-6jjh-rqpxCGA-x2w5-8gx7-hv25CGA-x5xx-hh6g-vxprCGA-xgx5-vpph-32mrCGA-xmpw-wprj-3c58
Published 11-09-2025Last modified 21-10-2026
Vulnerability summary
CVE-2025-39789 is a high (CVSS 7.3) vulnerability in linux. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 10.7% of scored vulnerabilities.
Priority
Routine
Not severe (CVSS 7.3, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?CVSS score
7.3/10
010
High · v3.1 (CVE.org)EPSS score
0.21%
0%100%
Low · +0.07 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1 · Related 2Timeline
- 11-09-2025PublishedVulnerability first disclosed.
- 21-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: x86/aegis - Add missing error checks The skcipher_walk functions can allocate memory and can fail, so checking for errors is necessary.
CVSS metrics
6 scores · 5 sources · 2 versionsLow 2.0Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:NSourcesSingle source
High 7.3Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:LSources5 sources · 5.5–7.3
- OSV · UbuntuEcosystem advisory · calculated7.3HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
- OSV · ChainguardEcosystem advisory · calculated7.3HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
0.21%
Chance of exploitation in the next 30 days
Percentile
11%
Versus all other CVEs
30-day change
Increase +0.07 pp
From 0.14% on 04-10-2026
04-10-202603-11-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Version check
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu147 products
- linuxAll versions (No fix recorded)
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded)
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Chainguard5 products
- linux-aws-6.12< 6.12.70-r0 | < 6.12.77-r0 | < 6.12.74-r1 | < 6.12.67-r0 | < 6.12.65-r0 | < 6.12.68-r1 | < 6.12.78-r0 | < 6.12.66-r0 | < 6.12.69-r0 | < 6.12.77-r2 | < 6.12.71-r0 | < 6.12.80-r0 | < 6.12.65-r1 | < 6.12.74-r0 | < 6.12.72-r1 | < 6.12.60-r4 | < 6.12.62-r1 | < 6.12.62-r0 | < 6.12.63-r0 | < 6.12.77-r1 | < 6.12.62-r2 | < 6.12.76-r0 | < 6.12.68-r0 | < 6.12.72-r0 | < 6.12.65-r2
- linux-azure-6.12< 6.12.62-r0 | < 6.12.65-r1 | < 6.12.76-r0 | < 6.12.67-r0 | < 6.12.65-r2 | < 6.12.60-r4 | < 6.12.72-r0 | < 6.12.60-r3 | < 6.12.71-r0 | < 6.12.69-r0 | < 6.12.66-r0 | < 6.12.63-r0 | < 6.12.77-r1 | < 6.12.68-r0 | < 6.12.74-r1 | < 6.12.74-r0 | < 6.12.80-r0 | < 6.12.62-r2 | < 6.12.78-r0 | < 6.12.77-r2 | < 6.12.77-r0 | < 6.12.62-r1 | < 6.12.65-r3 | < 6.12.65-r4 | < 6.12.70-r0
- linux-gcp-6.12< 6.12.68-r0 | < 6.12.66-r0 | < 6.12.69-r0 | < 6.12.77-r2 | < 6.12.70-r0 | < 6.12.77-r1 | < 6.12.60-r3 | < 6.12.76-r0 | < 6.12.65-r1 | < 6.12.62-r1 | < 6.12.62-r2 | < 6.12.74-r1 | < 6.12.63-r0 | < 6.12.71-r0 | < 6.12.74-r0 | < 6.12.60-r4 | < 6.12.72-r0 | < 6.12.67-r0 | < 6.12.65-r0 | < 6.12.68-r1 | < 6.12.77-r0 | < 6.12.80-r0 | < 6.12.78-r0 | < 6.12.62-r0 | < 6.12.65-r2
- linux-qemu-6.12< 6.12.77-r0 | < 6.12.77-r1 | < 6.12.65-r1 | < 6.12.67-r0 | < 6.12.66-r0 | < 6.12.69-r0 | < 6.12.74-r0 | < 6.12.76-r0 | < 6.12.65-r2 | < 6.12.74-r1 | < 6.12.78-r0 | < 6.12.77-r2 | < 6.12.68-r0 | < 6.12.80-r0 | < 6.12.71-r0 | < 6.12.72-r0 | < 6.12.70-r0
- linux-vmware-6.12< 6.12.74-r0 | < 6.12.68-r1 | < 6.12.71-r0 | < 6.12.77-r2 | < 6.12.77-r0 | < 6.12.66-r0 | < 6.12.67-r0 | < 6.12.77-r1 | < 6.12.68-r0 | < 6.12.70-r0 | < 6.12.78-r0 | < 6.12.80-r0 | < 6.12.65-r2 | < 6.12.65-r1 | < 6.12.72-r0 | < 6.12.69-r0 | < 6.12.76-r0 | < 6.12.74-r1
Linux2 products
- linux≥ 1d373d4e8e15b358f08de52956b32e0e38a11f84, < 74d3b91f1598eedf87a977702f9f55e32698206d | ≥ 1d373d4e8e15b358f08de52956b32e0e38a11f84, < b4ba650125d21e937f82fcafcd2738fe31209c05 | ≥ 1d373d4e8e15b358f08de52956b32e0e38a11f84, < 475104178f4d30e749ee4f5473c87f692b93bebb | ≥ 1d373d4e8e15b358f08de52956b32e0e38a11f84, < 3d9eb180fbe8828cce43bce4c370124685b205c3 | 4.18
- linux_kernel≥ 4.18, < 6.16.4
Debian1 product
- linuxAll versions (No fix recorded) | < 6.12.115-2 | < 6.16.5-1
4 vendors · 155 products
