A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES). A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction (for example, outs or ins) using the exit reason SVM_EXIT_IOIO. This issue results in a crash of the entire system or a potential guest-to-host escape scenario.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 7, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 7, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel | Mar 5, 2024 | Feb 18, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.13.0-28-genericUpgrade linux-image-5.13.0-1013-gcpUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.13.0-1012-awsUpgrade linux-image-gcpUpgrade linux-image-5.13.0-1016-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-1011-kvmUpgrade linux-image-5.13.0-28-generic-64kUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeUpgrade linux-image-5.13.0-28-lowlatencyUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-5.13.0-1016-raspi-nolpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.11.0-1029-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.13.0-28-generic-lpaeUpgrade linux-image-5.13.0-1029-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-1028-oracleUpgrade linux-image-5.13.0-1016-raspiUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-1028-azureUpgrade linux-image-lowlatency | Feb 3, 2022 | Feb 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub