A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the `VMGEXIT` handler recursively. If an attacker manages to call the handler multiple times, they can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages (`CONFIG_VMAP_STACK`).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel | Nov 28, 2023 | Sep 13, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 8, 2023 | Sep 13, 2023 |
| Debian | — | Upgrade linux | Oct 19, 2023 | Sep 13, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Aug 4, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Sep 13, 2023 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade dtb-amazonUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-develUpgrade dtb-amdUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-symsUpgrade dtb-alteraUpgrade kernel-debug-develUpgrade kernel-rt-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-optionalUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade dtb-qcomUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-develUpgrade kernel-default-baseUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade kernel-docs | Oct 11, 2023 | Sep 13, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.2.0-1014-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.2.0-1014-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-6.2.0-34-generic-64kUpgrade linux-image-5.15.0-1047-awsUpgrade linux-image-6.2.0-1014-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.2.0-34-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.2.0-1014-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.1.0-1021-oemUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-86-genericUpgrade linux-image-6.2.0-1013-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1049-azureUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1013-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.2.0-1014-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.2.0-1016-gcpUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.2.0-34-generic-lpaeUpgrade linux-image-6.2.0-1014-lowlatencyUpgrade linux-image-6.2.0-1006-starfiveUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-lowlatency | Sep 18, 2023 | Sep 13, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 13, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub