What’s Vulnerable › Vulnerabilities

CVE-2026-98871: crypto: ccp - Fix possible deadlock in SEV init failure path

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-23 · updated 2026-10-23

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init failure path __sev_platform_init_handle_init_ex_path() calls rmp_mark_pages_firmware() with locked=false while the parent function of init_ex_path already acquired the sev_cmd_mutex. In the case of an RMPUPDATE failure for any page after the first, the cleanup path would invoke reclaim pages which would result in a deadlock in sev_do_cmd. Pass locked=true to honor the lock status of the parent function.

Affected products

• Linux kernel: 6.9 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4
• https://git.kernel.org/stable/c/8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1
• https://git.kernel.org/stable/c/b0e7ec0dab242c5e480121ba12400d0513e37ca2
• https://git.kernel.org/stable/c/ffd3a3df92be697eb78118a146c6a5d5e6c1f724

Get alerted when CVE-2026-98871 or the next vulnerability affects your stack