crypto: ccp - Fix possible deadlock in SEV init failure path
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.12.111, 6.18.53, 7.2.6
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The Linux kernel's AMD Secure Encrypted Virtualization (SEV) driver, part of the CCP crypto subsystem, can deadlock during a failed SEV platform initialization. Successfully exploiting this flaw would hang the affected system, causing a denial of service.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init failure path __sev_platform_init_handle_init_ex_path() calls rmp_mark_pages_firmware() with locked=false while the parent function of init_ex_path already acquired the sev_cmd_mutex. In the case of an RMPUPDATE failure for any page after the first, the cleanup path would invoke reclaim pages which would result in a deadlock in sev_do_cmd. Pass locked=true to honor the lock status of the parent function.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- Linux Linux
From 7364a6fbca45f826952ea932699fb2171d06ee73 · fixed in 8e7e06ee7c2938ee3fa31a61cc5289a45c8c13f1; From 7364a6fbca45f826952ea932699fb2171d06ee73 · fixed in ffd3a3df92be697eb78118a146c6a5d5e6c1f724; From 7364a6fbca45f826952ea932699fb2171d06ee73 · fixed in 364f3841bc22c72b6e2cb72a1e3c91c9c8fc1ef4; From 7364a6fbca45f826952ea932699fb2171d06ee73 · fixed in b0e7ec0dab242c5e480121ba12400d0513e37ca2
- Linux Linux
6.9
- KernelLinux
From 6.9.0 · fixed in 6.12.111; From 6.13.0 · fixed in 6.18.53; From 6.19.0 · fixed in 7.2.6