Bug 2559572 (CVE-2026-98871) - CVE-2026-98871 kernel: crypto: ccp - Fix possible deadlock in SEV init failure path
Summary: CVE-2026-98871 kernel: crypto: ccp - Fix possible deadlock in SEV init failur...
Keywords:
Status: NEW
Alias: CVE-2026-98871
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-10-23 12:04 UTC by OSIDB Bzimport
Modified: 2026-10-26 09:53 UTC (History)
17 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-10-23 12:04:44 UTC
In the Linux kernel, the following vulnerability has been resolved:

crypto: ccp - Fix possible deadlock in SEV init failure path

__sev_platform_init_handle_init_ex_path() calls
rmp_mark_pages_firmware() with locked=false while the parent
function of init_ex_path already acquired the sev_cmd_mutex.
In the case of an RMPUPDATE failure for any page after the first, the cleanup
path would invoke reclaim pages which would result in a deadlock in
sev_do_cmd.

Pass locked=true to honor the lock status of the parent function.


Note You need to log in before you can comment on or make changes to this bug.