The vulnerability originates from the crypto: ccp subsystem in the Linux kernel, where the SEV (Secure Encrypted Virtualization) initialization failure path fails to obtain the correct lock before invoking a page reclamation routine. If an RMPUPDATE operation fails on any page after the first, the cleanup process attempts to reclaim pages while another thread already holds the sev_cmd_mutex, causing a deadlock in sev_do_cmd. This deadlock stalls kernel execution and can lead to a system-wide hang or reboot, effectively denying service to all processes. The flaw resides entirely in privileged kernel code, so the impact is confined to unusable system state rather than direct privilege escalation or data exposure.

All Linux kernel builds that include the SEV crypto features and do not contain the commit that schedules rmp_mark_pages_firmware with the proper locked flag are affected. The issue is present in all kernel versions before the fix referenced in the listed Git commits. Users running older kernel releases without the patch should consider updating to the latest available kernels from their distribution or the upstream repository. The mapping to CPE shows the vulnerability applies to the generic "linux_kernel" family.

Because the deadlock occurs during internal kernel operations, execution of the flaw does not require external authentication or privileged user context beyond normal kernel interactions. An attacker could potentially trigger repeated SEV initialization errors to induce the deadlock, which would halt system responsiveness. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting that there is no currently widespread exploitation. However, the severity is notable due to the breadth of impact: the entire guest or host may become unavailable. The CVSS score is not disclosed in the data, but the nature of a system‑wide denial of service warrants high attention from administrators managing SEV‑enabled kernels. The lack of an availability of exploits does not diminish the importance of patching, because the flaw can be emphasized by manipulating SEV commands, which may be feasible in environments with custom device drivers or compromised components.