Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2023-53769

virt/coco/sev-guest: Double-buffer messages

Description

In the Linux kernel, the following vulnerability has been resolved: virt/coco/sev-guest: Double-buffer messages The encryption algorithms read and write directly to shared unencrypted memory, which may leak information as well as permit the host to tamper with the message integrity. Instead, copy whole messages in or out as needed before doing any computation on them.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d5af44dde5461d125d1602ac913ab5c6bdf09b8b to < 577a64725bfd77645986168e953d405067ee565baffected
  • d5af44dde5461d125d1602ac913ab5c6bdf09b8b to < c27dafc4aa50a29ec927b3aa84ac7b430071f682affected
  • d5af44dde5461d125d1602ac913ab5c6bdf09b8b to < 4b69c63f716cfda38e1210e65b68f67f6cee2ddfaffected
  • d5af44dde5461d125d1602ac913ab5c6bdf09b8b to < 965006103a14703cc42043bbf9b5e0cdf7a468adaffected

Linux Linux

Default version status: affected

  • 5.19affected
  • 0 to < 5.19unaffected
  • 6.1.28 to ≤ 6.1.*unaffected
  • 6.2.15 to ≤ 6.2.*unaffected
  • 6.3.2 to ≤ 6.3.*unaffected
  • 6.4 to ≤ *unaffected

References