Ubuntu kernel notice covers AMD SEV-SNP flaw CVE-2023-20585
Original title: USN-9025-1: Linux kernel vulnerabilities
A local attacker with hypervisor access could corrupt SEV-SNP guest memory; the same update also fixes other kernel flaws.
USN-9025-1 reports that some AMD processors did not properly perform Reverse Map Table checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory (CVE-2023-20585). The notice also says several other Linux kernel issues could possibly be used to compromise the system and lists subsystems the update corrects.
Unconfirmed: The snippet does not name affected processor models, kernel versions or whether CVE-2023-20585 is exploited.
- CVE-2023-20585 requires local access with hypervisor privileges.
- The AMD issue can affect integrity of SEV-SNP guest memory.
- Other fixes include USB Gadget, memory management, NVDIMM and networking.
- No exploitation status is stated.
Impact: Out-of-bounds access compromising SEV-SNP guest memory integrity
| Product | Affected |
|---|---|
| AMD processors with SEV-SNP | — |
| Canonical Linux kernel | — |
- 1.Install the Ubuntu kernel update in USN-9025-1.
- CVEs
- CVE-2023-20585
- Products
- Linux kernelSEV-SNP
- Organizations
- Ubuntu
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-20585 | Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds… | 5.6 | <1% |
From the original article
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.