Ubuntu fixes Linux kernel (Azure) flaws, including AMD SEV-SNP issue
Original title: USN-9026-1: Linux kernel (Azure) vulnerabilities
A local attacker with hypervisor access could break SEV-SNP guest memory integrity via CVE-2023-20585; other kernel subsystems are also patched.
Ubuntu published USN-9026-1 for the Linux kernel used on Azure. One issue, CVE-2023-20585, is an AMD processor flaw in Reverse Map Table checks when the IOMMU accesses certain host buffers. A local attacker with hypervisor access could trigger an out-of-bounds condition and compromise SEV-SNP guest memory integrity. The update also corrects flaws in USB Gadget, memory management, NVDIMM, network file systems, Handshake API, networking core, stream parser, and ARM32, among other subsystems.
Unconfirmed: The excerpt names only CVE-2023-20585 and cuts off the full subsystem and version list.
- CVE-2023-20585 concerns improper AMD RMP checks on IOMMU access to host buffers.
- The attacker needs local hypervisor access; guest memory integrity is the stated impact.
- Other fixes cover USB Gadget, memory management, NVDIMM, networking, and ARM32.
- The notice does not name the remaining CVEs or fixed package versions in this excerpt.
Impact: SEV-SNP guest memory integrity compromise
| Product | Affected |
|---|---|
| AMD processors with SEV-SNP | — |
| Ubuntu Linux kernel (Azure) | — |
- 1.Apply Ubuntu kernel update USN-9026-1 on Azure images.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-20585 | Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds… | 5.6 | <1% |
From the original article
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.