CVE-2026-98871None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init failure path __sev_platform_init_handle_init_ex_path() calls rmp_mark_pages_firmware() with locked=false while the pare…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the Linux kernel, the following vulnerability has been resolved:
crypto: ccp - Fix possible deadlock in SEV init failure path
__sev_platform_init_handle_init_ex_path() calls rmp_mark_pages_firmware() with locked=false while the parent function of init_ex_path already acquired the sev_cmd_mutex. In the case of an RMPUPDATE failure for any page after the first, the cleanup path would invoke reclaim pages which would result in a deadlock in sev_do_cmd.
Pass locked=true to honor the lock status of the parent function.
Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < 8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < ffd3a3df92be697eb78118a146c6a5d5e6c1f724Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < 364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < b0e7ec0dab242c5e480121ba12400d0513e37ca2Linux 6.9Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99001Nonedrm/xe/i2c: cancel the client work on remove
CVE-2026-98989Nonenamespace: check a recursive bind mount for mount namespace loops
CVE-2026-98988Nonenamespace: keep covered mounts covered in OPEN_TREE_NAMESPACE
CVE-2026-98992Nonenamespace: don't copy an unmounted mount tree
CVE-2026-98991Nonenamespace: queue a mount only once for mount notifications
CVE-2026-98990Nonenamespace: check a submount for references right before unmounting it