In the Linux kernel, the following vulnerability has been resolved:
KVM: SVM: fix missing sev_decommission in sev_receive_start
DECOMMISSION the current SEV context if binding an ASID fails after RECEIVE_START. Per AMD's SEV API, RECEIVE_START generates a new guest context and thus needs to be paired with DECOMMISSION:
The RECEIVE_START command is the only command other than the LAUNCH_START command that generates a new guest context and guest handle.
The missing DECOMMISSION can result in subsequent SEV launch failures, as the firmware leaks memory and might not able to allocate more SEV guest contexts in the future.
Note, LAUNCH_START suffered the same bug, but was previously fixed by commit 934002cd660b ("KVM: SVM: Call SEV Guest Decommission if ASID binding fails").
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-macrosUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-sprdUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade dtb-alteraUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-apmUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-debugUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amazonUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kernel-syms-rt | Aug 9, 2024 | May 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub