In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init failure path… (CVE-2026-98871)

The vulnerability in the Linux kernel's crypto CCP SEV component involves a deadlock condition triggered during the SEV initialization failure path. Specifically, __sev_platform_init_handle_init_ex_path() calls rmp_mark_pages_firmware() with locked=false, while the parent function has already acquired the sev_cmd_mutex. If an RMPUPDATE failure occurs for any page after the first, the cleanup path attempts to reclaim pages, causing a deadlock in sev_do_cmd due to improper lock handling. The resolution is to pass locked=true to rmp_mark_pages_firmware() to respect the existing lock and prevent deadlock.

This vulnerability can cause a deadlock in the SEV initialization failure path of the Linux kernel, potentially leading to system hangs or unresponsiveness during the affected operation. There is no indication of code execution or privilege escalation impact. The issue affects system stability during specific failure conditions in SEV initialization.

A fix has been implemented in the Linux kernel to address this deadlock by correcting the lock handling in the SEV initialization failure path. Users should apply the official kernel updates that include this fix once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory for current remediation guidance.