Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (MA).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-firmware-usb-networkUpgrade kernel-firmware-networkUpgrade kernel-firmware-serialUpgrade kernel-firmware-liquidioUpgrade kernel-firmware-mwifiexUpgrade kernel-firmware-tiUpgrade kernel-firmware-presteraUpgrade kernel-firmware-soundUpgrade kernel-firmware-radeonUpgrade kernel-firmware-intelUpgrade kernel-firmware-bluetoothUpgrade kernel-firmware-amdgpuUpgrade kernel-firmware-qcomUpgrade kernel-firmware-mediaUpgrade kernel-firmware-dpaa2Upgrade kernel-firmware-ueagleUpgrade kernel-firmware-chelsioUpgrade kernel-firmware-bnx2Upgrade kernel-firmware-i915Upgrade kernel-firmware-brcmUpgrade kernel-firmware-allUpgrade kernel-firmware-iwlwifiUpgrade kernel-firmware-platformUpgrade kernel-firmware-nfpUpgrade kernel-firmware-atherosUpgrade kernel-firmware-mellanoxUpgrade kernel-firmware-realtekUpgrade kernel-firmware-ath10kUpgrade kernel-firmware-ath11kUpgrade ucode-amdUpgrade kernel-firmware-nvidiaUpgrade kernel-firmware-marvellUpgrade kernel-firmwareUpgrade kernel-firmware-mediatekUpgrade kernel-firmware-qlogic | Oct 26, 2022 | May 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub