A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES). A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction (for example, outs or ins) using the exit reason SVM_EXIT_IOIO. This issue results in a crash of the entire system or a potential guest-to-host escape scenario.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 7, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 7, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade perfUpgrade python3-perf | Mar 5, 2024 | Feb 18, 2022 |
| Ubuntu | — | Upgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-5.13.0-28-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-5.11.0-1028-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.13.0-1029-oemUpgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-5.13.0-1012-awsUpgrade linux-image-5.13.0-28-genericUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-virtualUpgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04 | Feb 3, 2022 | Feb 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub