Linux CVE-2026-23344

The vulnerability resides in the Linux kernel's AMD Secure Processor (SEV/TSM) initialization code within the crypto/ccp subsystem. The root cause is a use-after-free memory access defect (CWE-416), a critical memory safety issue where the code attempts to dereference a pointer to memory that has already been freed. Specifically, in the error handling path of sev_tsm_init_locked(), the function calls kfree(t) to deallocate the structure 't', but subsequently calls pr_err() to log an error message that references t->tio_en and t->tio_init_done fields. This is a common memory safety violation in C kernel code where error path cleanup is not properly sequenced. The affected products are identified via CPE as cpe:2.3:a:linux:linux (all versions), indicating this affects all Linux distributions using vulnerable kernel versions prior to the patch.