A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES). A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction (for example, outs or ins) using the exit reason SVM_EXIT_IOIO. This issue results in a crash of the entire system or a potential guest-to-host escape scenario.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 7, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 7, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernelUpgrade perfUpgrade kernel-debug-coreUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Mar 5, 2024 | Feb 18, 2022 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-5.11.0-1028-azureUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.13.0-28-generic-lpaeUpgrade linux-image-5.13.0-1029-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-5.13.0-28-genericUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-5.13.0-1012-awsUpgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-kvm | Feb 3, 2022 | Feb 3, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub