In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for disclosure of SEV guest memory contents. Users of SEV-ES/SEV-SNP guest VMs are not impacted by this vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-firmware-nvidiaUpgrade kernel-firmware-presteraUpgrade kernel-firmware-iwlwifiUpgrade kernel-firmware-intelUpgrade kernel-firmware-radeonUpgrade kernel-firmware-soundUpgrade kernel-firmware-mwifiexUpgrade ucode-amdUpgrade kernel-firmware-serialUpgrade kernel-firmware-mediaUpgrade kernel-firmware-networkUpgrade kernel-firmwareUpgrade kernel-firmware-brcmUpgrade kernel-firmware-usb-networkUpgrade kernel-firmware-atherosUpgrade kernel-firmware-dpaa2Upgrade kernel-firmware-tiUpgrade kernel-firmware-amdgpuUpgrade kernel-firmware-realtekUpgrade kernel-firmware-marvellUpgrade kernel-firmware-liquidioUpgrade kernel-firmware-chelsioUpgrade kernel-firmware-i915Upgrade kernel-firmware-qcomUpgrade kernel-firmware-mediatekUpgrade kernel-firmware-mellanoxUpgrade kernel-firmware-bnx2Upgrade kernel-firmware-ath10kUpgrade kernel-firmware-qlogicUpgrade kernel-firmware-allUpgrade kernel-firmware-ueagleUpgrade kernel-firmware-ath11kUpgrade kernel-firmware-bluetoothUpgrade kernel-firmware-platformUpgrade kernel-firmware-nfp | Oct 26, 2022 | May 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub