CVE-2026-98871

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98871", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.377Z", "datePublished": "2026-10-23T11:37:09.369Z", "dateUpdated": "2026-10-23T11:37:09.369Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-23T11:37:09.369Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: ccp - Fix possible deadlock in SEV init failure path\n\n__sev_platform_init_handle_init_ex_path() calls\nrmp_mark_pages_firmware() with locked=false while the parent\nfunction of init_ex_path already acquired the sev_cmd_mutex.\nIn the case of an RMPUPDATE failure for any page after the first, the cleanup\npath would invoke reclaim pages which would result in a deadlock in\nsev_do_cmd.\n\nPass locked=true to honor the lock status of the parent function."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/ccp/sev-dev.c"], "versions": [{"version": "7364a6fbca45f826952ea932699fb2171d06ee73", "lessThan": "8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1", "status": "affected", "versionType": "git"}, {"version": "7364a6fbca45f826952ea932699fb2171d06ee73", "lessThan": "ffd3a3df92be697eb78118a146c6a5d5e6c1f724", "status": "affected", "versionType": "git"}, {"version": "7364a6fbca45f826952ea932699fb2171d06ee73", "lessThan": "364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4", "status": "affected", "versionType": "git"}, {"version": "7364a6fbca45f826952ea932699fb2171d06ee73", "lessThan": "b0e7ec0dab242c5e480121ba12400d0513e37ca2", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/ccp/sev-dev.c"], "versions": [{"version": "6.9", "status": "affected"}, {"version": "0", "lessThan": "6.9", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.6", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "7.2.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1"}, {"url": "https://git.kernel.org/stable/c/ffd3a3df92be697eb78118a146c6a5d5e6c1f724"}, {"url": "https://git.kernel.org/stable/c/364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4"}, {"url": "https://git.kernel.org/stable/c/b0e7ec0dab242c5e480121ba12400d0513e37ca2"}], "title": "crypto: ccp - Fix possible deadlock in SEV init failure path", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/crypto/ccp/sev-dev.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1", "status": "affected", "version": "7364a6fbca45f826952ea932699fb2171d06ee73", "versionType": "git"}, {"lessThan": "ffd3a3df92be697eb78118a146c6a5d5e6c1f724", "status": "affected", "version": "7364a6fbca45f826952ea932699fb2171d06ee73", "versionType": "git"}, {"lessThan": "364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4", "status": "affected", "version": "7364a6fbca45f826952ea932699fb2171d06ee73", "versionType": "git"}, {"lessThan": "b0e7ec0dab242c5e480121ba12400d0513e37ca2", "status": "affected", "version": "7364a6fbca45f826952ea932699fb2171d06ee73", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/crypto/ccp/sev-dev.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.9"}, {"lessThan": "6.9", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: ccp - Fix possible deadlock in SEV init failure path\n\n__sev_platform_init_handle_init_ex_path() calls\nrmp_mark_pages_firmware() with locked=false while the parent\nfunction of init_ex_path already acquired the sev_cmd_mutex.\nIn the case of an RMPUPDATE failure for any page after the first, the cleanup\npath would invoke reclaim pages which would result in a deadlock in\nsev_do_cmd.\n\nPass locked=true to honor the lock status of the parent function."}], "id": "CVE-2026-98871", "lastModified": "2026-10-23T12:18:20.510", "metrics": {}, "published": "2026-10-23T12:18:20.510", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b0e7ec0dab242c5e480121ba12400d0513e37ca2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ffd3a3df92be697eb78118a146c6a5d5e6c1f724"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: crypto: ccp - Fix possible deadlock in SEV init failure path", "id": "2559572", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2559572"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.1", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-764", "details": ["A flaw was found in the Linux kernel's AMD Cryptographic Coprocessor (CCP) driver. This vulnerability can lead to a Denial of Service (DoS) due to a deadlock during AMD Secure Encrypted Virtualization (SEV) platform initialization. When an error occurs while configuring firmware memory, improper lock handling in the cleanup path causes the kernel to wait indefinitely on an already acquired lock. A local privileged user capable of triggering this initialization failure can exploit this flaw to hang the system."], "name": "CVE-2026-98871", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-23T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98871\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98871\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98871.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7364a6fbca45f826952ea932699fb2171d06ee73,8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7364a6fbca45f826952ea932699fb2171d06ee73,ffd3a3df92be697eb78118a146c6a5d5e6c1f724)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7364a6fbca45f826952ea932699fb2171d06ee73,364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7364a6fbca45f826952ea932699fb2171d06ee73,b0e7ec0dab242c5e480121ba12400d0513e37ca2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.9"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.9)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.111,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.53,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.6,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7364a6fbca45f826952ea932699fb2171d06ee73,8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7364a6fbca45f826952ea932699fb2171d06ee73,ffd3a3df92be697eb78118a146c6a5d5e6c1f724)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7364a6fbca45f826952ea932699fb2171d06ee73,364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7364a6fbca45f826952ea932699fb2171d06ee73,b0e7ec0dab242c5e480121ba12400d0513e37ca2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.9"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.9)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.111,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.53,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.6,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-23T14:30:13.801414+00:00", "updated": "2026-10-23T16:15:17.253385+00:00", "vendors": ["linux", "linux$PRODUCT$linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-368"]}