A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV).
Se ha encontrado un fallo en el kernel de Linux. La API existente de KVM SEV presenta una vulnerabilidad que permite que una aplicación a nivel de usuario no root (anfitrión) bloquee el kernel del anfitrión al crear una instancia de VM de invitado confidencial en la CPU de AMD que admite la virtualización cifrada segura (SEV).
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-459
|
| [email protected] | Primary |
en
CWE-212
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7fd341beab00> | Operating System |
| linux | linux_kernel | 5.18 | <built-in method update of dict object at 0x7fd341bea5c0> | Operating System |
| linux | linux_kernel | 5.18 | <built-in method update of dict object at 0x7fd341be8b40> | Operating System |
| linux | linux_kernel | 5.18 | <built-in method update of dict object at 0x7fd341be8540> | Operating System |
| linux | linux_kernel | 5.18 | <built-in method update of dict object at 0x7fd341bea140> | Operating System |
| redhat | enterprise_linux | 8.0 | <built-in method update of dict object at 0x7fd341be8440> | Operating System |
| redhat | enterprise_linux | 9.0 | <built-in method update of dict object at 0x7fd341bea300> | Operating System |
| debian | debian_linux | 10.0 | <built-in method update of dict object at 0x7fd341beaa80> | Operating System |
| debian | debian_linux | 11.0 | <built-in method update of dict object at 0x7fd386738c00> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:5.18:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:5.18:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:5.18:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:5.18:rc3:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |