CVE-2026-98871

medium

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init failure path __sev_platform_init_handle_init_ex_path() calls rmp_mark_pages_firmware() with locked=false while the parent function of init_ex_path already acquired the sev_cmd_mutex. In the case of an RMPUPDATE failure for any page after the first, the cleanup path would invoke reclaim pages which would result in a deadlock in sev_do_cmd. Pass locked=true to honor the lock status of the parent function.

References

https://git.kernel.org/stable/c/ffd3a3df92be697eb78118a146c6a5d5e6c1f724

https://git.kernel.org/stable/c/b0e7ec0dab242c5e480121ba12400d0513e37ca2

https://git.kernel.org/stable/c/8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1

https://git.kernel.org/stable/c/364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108717

Details

Source: Mitre, NVD

Published: 2026-10-23

Updated: 2026-10-23

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00168