Ubuntu patches Linux kernel flaws, including AMD SEV-SNP issue
Original title: USN-9024-1: Linux kernel vulnerabilities
A local attacker with hypervisor access could use CVE-2023-20585 to corrupt SEV-SNP guest memory integrity.
Ubuntu security notice USN-9024-1 fixes multiple Linux kernel flaws. One, CVE-2023-20585, is an AMD processor issue in which IOMMU access to certain host buffers skipped Reverse Map Table checks, possibly causing an out-of-bounds condition. The notice also covers issues in USB Gadget drivers, memory management, NVDIMM, networking and other subsystems, and says an attacker could possibly compromise the system. The snippet does not give fixed versions or exploitation status.
Unconfirmed: The snippet does not state affected Ubuntu releases, fixed versions, or whether any flaw is exploited.
- CVE-2023-20585 requires a local attacker who already has hypervisor access.
- Named subsystems include USB Gadget, memory management, NVDIMM and the networking core.
- The published snippet is truncated and omits the full flaw list.
Impact: Possible compromise of SEV-SNP guest memory integrity
| Product | Affected |
|---|---|
| Ubuntu Linux kernel | — |
| AMD processors with SEV-SNP | — |
- 1.Install the Linux kernel updates from USN-9024-1.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-20585 | Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds… | 5.6 | <1% |
From the original article
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.