{"id":"CVE-2026-98871","title":"crypto: ccp - Fix possible deadlock in SEV init failure path","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: ccp - Fix possible deadlock in SEV init failure path\n\n__sev_platform_init_handle_init_ex_path() calls\nrmp_mark_pages_firmware() with locked=false while the pare…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < 8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1","Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < ffd3a3df92be697eb78118a146c6a5d5e6c1f724","Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < 364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4","Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < b0e7ec0dab242c5e480121ba12400d0513e37ca2","Linux 6.9"],"published":"2026-10-23","updated":"2026-10-23","sourceUpdated":"2026-10-23T11:37:09.369Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98871","references":[{"url":"https://git.kernel.org/stable/c/8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1"},{"url":"https://git.kernel.org/stable/c/ffd3a3df92be697eb78118a146c6a5d5e6c1f724"},{"url":"https://git.kernel.org/stable/c/364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4"},{"url":"https://git.kernel.org/stable/c/b0e7ec0dab242c5e480121ba12400d0513e37ca2"}],"tags":["cve.org"],"ingestedAt":"2026-10-23T13:24:55.585Z","slug":"CVE-2026-98871","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: ccp - Fix possible deadlock in SEV init failure path\n\n__sev_platform_init_handle_init_ex_path() calls\nrmp_mark_pages_firmware() with locked=false while the parent\nfunction of init_ex_path already acquired the sev_cmd_mutex.\nIn the case of an RMPUPDATE failure for any page after the first, the cleanup\npath would invoke reclaim pages which would result in a deadlock in\nsev_do_cmd.\n\nPass locked=true to honor the lock status of the parent function.\n\n## Affected\n\n- `Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < 8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1`\n- `Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < ffd3a3df92be697eb78118a146c6a5d5e6c1f724`\n- `Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < 364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4`\n- `Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < b0e7ec0dab242c5e480121ba12400d0513e37ca2`\n- `Linux 6.9`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}