CVE-2026-98871

Source
https://cve.org/CVERecord?id=CVE-2026-98871
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98871.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-98871
Downstream
Related
Published
2026-10-23T11:37:09Z
Modified
2026-11-04T14:27:26Z
Summary
crypto: ccp - Fix possible deadlock in SEV init failure path
Details

In the Linux kernel, the following vulnerability has been resolved:

crypto: ccp - Fix possible deadlock in SEV init failure path

__sev_platform_init_handle_init_ex_path() calls rmp_mark_pages_firmware() with locked=false while the parent function of init_ex_path already acquired the sev_cmd_mutex. In the case of an RMPUPDATE failure for any page after the first, the cleanup path would invoke reclaim pages which would result in a deadlock in sev_do_cmd.

Pass locked=true to honor the lock status of the parent function.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98871.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7364a6fbca45f826952ea932699fb2171d06ee73
Fixed
8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1
Fixed
ffd3a3df92be697eb78118a146c6a5d5e6c1f724
Fixed
364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4
Fixed
b0e7ec0dab242c5e480121ba12400d0513e37ca2

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98871.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.9.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.6

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-98871.json"