All vulnerabilities
CVE-2026-98871

Linux: crypto: ccp - Fix possible deadlock in SEV init failure path

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1Also 364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4CVE List
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

  • 8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1LinuxCVE List
  • 364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: ccp - Fix possible deadlock in SEV init failure path

__sev_platform_init_handle_init_ex_path() calls rmp_mark_pages_firmware() with locked=false while the parent function of init_ex_path already acquired the sev_cmd_mutex. In the case of an RMPUPDATE failure for any page after the first, the cleanup path would invoke reclaim pages which would result in a deadlock in sev_do_cmd.

Pass locked=true to honor the lock status of the parent function.

Text from CVE List

Affected versions 10

  • Linuxaffected: 7364a6fbca45f826952ea932699fb2171d06ee73 before 8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1CVE List
  • Linuxaffected: 7364a6fbca45f826952ea932699fb2171d06ee73 before ffd3a3df92be697eb78118a146c6a5d5e6c1f724CVE List
  • Linuxaffected: 7364a6fbca45f826952ea932699fb2171d06ee73 before 364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4CVE List
  • Linuxaffected: 7364a6fbca45f826952ea932699fb2171d06ee73 before b0e7ec0dab242c5e480121ba12400d0513e37ca2CVE List
  • Linuxaffected: 6.9CVE List
  • Linuxunaffected: all versions before 6.9CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.6 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4