Description
A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV).
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a kernel
Fixed in kernel 5.18-rc4affected
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2038940 ↗
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=683412ccf61294d727ead4a73d97397396e69a6b ↗
- https://access.redhat.com/security/cve/CVE-2022-0171 ↗
- https://www.debian.org/security/2022/dsa-5257 ↗
- https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-794697.html ↗