Ubuntu patches NVIDIA Tegra kernel, including AMD SEV-SNP flaw
Original title: USN-9091-1: Linux kernel (NVIDIA Tegra) vulnerabilities
CVE-2023-20585 can let a local hypervisor attacker corrupt SEV-SNP guest memory; other kernel fixes are only partly listed.
Ubuntu published USN-9091-1 for the Linux kernel (NVIDIA Tegra). One issue, CVE-2023-20585, involves AMD processors that did not properly perform Reverse Map Table checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could trigger an out-of-bounds condition and compromise SEV-SNP guest memory integrity. The notice also says other kernel subsystem flaws are fixed, but the feed text is cut off.
Unconfirmed: The snippet names only CVE-2023-20585 and cuts off before the full subsystem and version list.
- CVE-2023-20585 concerns AMD Reverse Map Table checks during IOMMU access to host buffers.
- The described attacker needs local hypervisor access.
- Other fixes mention USB Gadget, memory management, networking and several CPU architectures.
- Affected and fixed version strings are not in the snippet.
Impact: Out-of-bounds access compromising SEV-SNP guest memory
| Product | Affected |
|---|---|
| AMD processors with SEV-SNP | — |
| Ubuntu Linux kernel (NVIDIA Tegra) | — |
- 1.Install the USN-9091-1 Linux kernel (NVIDIA Tegra) update.
- CVEs
- CVE-2023-20585
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-20585 | Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds… | 5.6 | <1% |
From the original article
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.