---
id: CVE-2026-98871
title: 'crypto: ccp - Fix possible deadlock in SEV init failure path'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  crypto: ccp - Fix possible deadlock in SEV init failure path

  __sev_platform_init_handle_init_ex_path() calls
  rmp_mark_pages_firmware() with locked=false while the pare…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 <
    8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1
  - >-
    Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 <
    ffd3a3df92be697eb78118a146c6a5d5e6c1f724
  - >-
    Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 <
    364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4
  - >-
    Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 <
    b0e7ec0dab242c5e480121ba12400d0513e37ca2
  - Linux 6.9
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T11:37:09.369Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98871'
references:
  - url: 'https://git.kernel.org/stable/c/8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1'
  - url: 'https://git.kernel.org/stable/c/ffd3a3df92be697eb78118a146c6a5d5e6c1f724'
  - url: 'https://git.kernel.org/stable/c/364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4'
  - url: 'https://git.kernel.org/stable/c/b0e7ec0dab242c5e480121ba12400d0513e37ca2'
tags:
  - cve.org
ingestedAt: '2026-10-23T13:24:55.585Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

crypto: ccp - Fix possible deadlock in SEV init failure path

__sev_platform_init_handle_init_ex_path() calls
rmp_mark_pages_firmware() with locked=false while the parent
function of init_ex_path already acquired the sev_cmd_mutex.
In the case of an RMPUPDATE failure for any page after the first, the cleanup
path would invoke reclaim pages which would result in a deadlock in
sev_do_cmd.

Pass locked=true to honor the lock status of the parent function.

## Affected

- `Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < 8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1`
- `Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < ffd3a3df92be697eb78118a146c6a5d5e6c1f724`
- `Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < 364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4`
- `Linux >= 7364a6fbca45f826952ea932699fb2171d06ee73 < b0e7ec0dab242c5e480121ba12400d0513e37ca2`
- `Linux 6.9`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.