CVE-2026-64310

A flaw was found in the Linux kernel's crypto: ccp component. A local user, by triggering specific SEV (Secure Encrypted Virtualization) input/output control (ioctl) operations when SEV initialization fails and Kernel-based Virtual Machine (KVM) is actively running virtual machines, could cause the system to zero out a critical hardware register. This could lead to a general protection fault, resulting in a denial of service (DoS) by crashing the host system.

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation is restricted to local attackers with access to the SEV management interface and results solely in host denial of service rather than code execution or data exposure. The issue occurs only on AMD-based virtualization hosts running active KVM guests when firmware initialization fails during specific control operations. Standard enterprise deployments typically restrict character device access for cryptographic hardware to privileged accounts, significantly limiting exposure in multi-tenant environments. Systems without AMD SEV hardware or without active KVM workloads are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.