CVE-2026-64310

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the crypto ccp component where the sev move to init state() function incorrectly initializes SNP for certain SEV ioctls. A userspace process could potentially trigger this path via /dev/sev ioctls, such as SEV PDH GEN, which could lead to the global zeroing of MSR VM HSAVE PA. This condition may cause a general protection fault and crash the host during the next VMRUN execution for an active VM. The affected ioctls include SEV PEK GEN, SEV PDH GEN, SEV PEK CSR, SEV PEK CERT IMPORT, and SEV PDH CERT EXPORT. Additionally, the system previously failed to surface actual firmware errors, instead returning a hardcoded INVALID PLATFORM STATE value.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.