Riskcovery

CVE-2026-64309

crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)

State
Published
Severity
Not scored
Published
Jul 25, 2026
Updated
Aug 17, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)

Sashiko notes:

> if SEV initialization fails and KVM is actively running normal VMs, could a > userspace process trigger this code path via /dev/sev ioctls (e.g., > SEV_PDH_GEN) and zero out MSR_VM_HSAVE_PA globally? Would the next VMRUN > execution for an active VM trigger a general protection fault and crash the > host?

The SNP_COMMIT command does not require the firmware to be in any particular state. Skip initializing it if it was previously uninitialized.

The SEV-SNP firmware specification doc 56860 does not mention SNP_COMMIT in Table 5 as a command that is allowed in the UNINIT state, but it is in fact allowed and a future documentation update will reflect that.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1c3506ea8599a3ad1b9aae5cbd573134f8d18db7 to before 74768f73854d647a6462f252dc8782ab8a835211Affected
  • ceac7fb89e8da465aec3ac3c20477f912f5c3a6c to before 7a361c74bb12f3398c388905f1d325be642cd36eAffected
  • ceac7fb89e8da465aec3ac3c20477f912f5c3a6c to before 67ed191b4c8bdf432a3f32d1eb302880b4795cd1Affected
  • ceac7fb89e8da465aec3ac3c20477f912f5c3a6c to before 5a1364da2f04217a36e2fdfa2db4ee025b383a20Affected
  • 6.12.75 to before 6.12.96Affected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.12.96 through 6.12.*Not affected
  • 6.18.39 through 6.18.*Not affected
  • 7.1.4 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.