Unscored severity · published Oct 23, 2026
CVE-2026-98871
crypto: ccp - Fix possible deadlock in SEV init failure path
New
–
CVSS
0.2%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: ccp - Fix possible deadlock in SEV init failure path
__sev_platform_init_handle_init_ex_path() calls
rmp_mark_pages_firmware() with locked=false while the parent
function of init_ex_path already acquired the sev_cmd_mutex.
In the case of an RMPUPDATE failure for any page after the first, the cleanup
path would invoke reclaim pages which would result in a deadlock in
sev_do_cmd.
Pass locked=true to honor the lock status of the parent function.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Linux
7364a6fbca45f826952ea932699fb2171d06ee73 before 8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1; 7364a6fbca45f826952ea932699fb2171d06ee73 before ffd3a3df92be697eb78118a146c6a5d5e6c1f724; 7364a6fbca45f826952ea932699fb2171d06ee73 before 364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4; 7364a6fbca45f826952ea932699fb2171d06ee73 before b0e7ec0dab242c5e480121ba12400d0513e37ca2; 6.9 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-98871
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-98871
git.kernel.org
https://git.kernel.org/stable/c/364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4
git.kernel.org
https://git.kernel.org/stable/c/8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1
git.kernel.org
https://git.kernel.org/stable/c/b0e7ec0dab242c5e480121ba12400d0513e37ca2
git.kernel.org
https://git.kernel.org/stable/c/ffd3a3df92be697eb78118a146c6a5d5e6c1f724
More from Linux
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
7.8
CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
7.8
CVE-2026-46300
net: skbuff: preserve shared-frag marker during coalescing
7.8
CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place
