← Back to CVE intelligence
CVE intelligence

CVE-2026-98871

Vulnerability intelligence

Published Oct 23, 2026Sources checked Nov 3, 2026
N/ACVSS not listedScore unavailable
What this means

Review the available evidence

CVE-2026-98871. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

CISA KEVNot listedBased on the latest collected catalog
EPSS0.2%Estimated 30-day exploitation probability
Ransomware useNot markedCISA KEV ransomware field
Threat actors0Source-linked actor relationships
Overview

What is CVE-2026-98871?

In the Linux kernel, the following vulnerability has been resolved:

crypto: ccp - Fix possible deadlock in SEV init failure path

__sev_platform_init_handle_init_ex_path() calls rmp_mark_pages_firmware() with locked=false while the parent function of init_ex_path already acquired the sev_cmd_mutex. In the case of an RMPUPDATE failure for any page after the first, the cleanup path would invoke reclaim pages which would result in a deadlock in sev_do_cmd.

Pass locked=true to honor the lock status of the parent function.

Source: NVD