CVE-2026-98871 crypto: ccp - Fix possible deadlock in SEV init failure path

Not scored Published 23 Oct 2026 Updated 23 Oct 2026

Exploited in the wild: Not known
Fix: Available

What is CVE-2026-98871?

CVE-2026-98871 is a vulnerability in Linux, published on 23 Oct 2026.

Official description

In the Linux kernel, the following vulnerability has been resolved:

crypto: ccp - Fix possible deadlock in SEV init failure path

__sev_platform_init_handle_init_ex_path() calls rmp_mark_pages_firmware() with locked=false while the parent function of init_ex_path already acquired the sev_cmd_mutex. In the case of an RMPUPDATE failure for any page after the first, the cleanup path would invoke reclaim pages which would result in a deadlock in sev_do_cmd.

Pass locked=true to honor the lock status of the parent function.

Which versions are affected by CVE-2026-98871?

How do I fix CVE-2026-98871?

Upgrade to a fixed version.

Is CVE-2026-98871 being exploited?

There is no known exploitation of CVE-2026-98871 in the wild and no public exploit code.

Sources

Also known as BELL-CVE-2026-98871, DEBIAN-CVE-2026-98871, GHSA-34hf-3mqj-6x9g, UBUNTU-CVE-2026-98871.