Ubuntu kernel (NVIDIA) update fixes AMD SEV-SNP flaw CVE-2023-20585
Original title: USN-9043-1: Linux kernel (NVIDIA) vulnerabilities
A local attacker with hypervisor access could trigger an out-of-bounds condition and alter SEV-SNP guest memory.
USN-9043-1 covers Linux kernel (NVIDIA) flaws, including CVE-2023-20585. Some AMD processors did not properly perform Reverse Map Table checks when the IOMMU accessed certain host buffers. The notice also says other kernel issues could let an attacker compromise the system, across several architectures and drivers. No exploitation is mentioned.
Unconfirmed: The notice is truncated, so the full set of flaws and fixed versions is not listed.
- CVE-2023-20585 requires a local attacker who already has hypervisor access.
- The flaw can compromise the integrity of SEV-SNP guest memory.
- Named subsystems include ARM64, ARM32, MIPS, OpenRISC, PowerPC, RISC-V, NVDIMM, and the Handshake API.
- Fixed package versions are not in the feed snippet.
Impact: Out-of-bounds condition compromising SEV-SNP guest memory integrity
| Product | Affected |
|---|---|
| AMD processors with SEV-SNP | — |
| Canonical Linux kernel (NVIDIA) | — |
- 1.Apply the USN-9043-1 Linux kernel (NVIDIA) update.
- CVEs
- CVE-2023-20585
- Products
- Linux kernel (NVIDIA)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-20585 | Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds… | 5.6 | <1% |
From the original article
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.