Ubuntu kernel notice fixes AMD SEV-SNP RMP check flaw
Original title: USN-9040-1: Linux kernel (Low Latency NVIDIA) vulnerabilities
A local attacker with hypervisor access could compromise SEV-SNP guest memory integrity.
Ubuntu published USN-9040-1 for the Low Latency NVIDIA Linux kernel. Some AMD processors did not properly perform Reverse Map Table checks when the IOMMU accessed certain host buffers, tracked as CVE-2023-20585. A local attacker with hypervisor access could trigger an out-of-bounds condition and affect SEV-SNP guest memory integrity. The update also corrects several other kernel subsystem flaws.
Unconfirmed: The feed snippet is truncated and does not list every flaw or a fixed version.
- The named issue is CVE-2023-20585 in AMD processor RMP checks.
- Other corrected areas include USB Gadget, memory management, and NVDIMM drivers.
- Networking core, the handshake API, and the stream parser are also listed.
- The notice snippet does not state a fixed package version.
Impact: integrity compromise of SEV-SNP guest memory
| Product | Affected |
|---|---|
| Ubuntu Linux kernel (Low Latency NVIDIA) | — |
| AMD processors with SEV-SNP | — |
- 1.Install the Ubuntu kernel update from USN-9040-1.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-20585 | Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds… | 5.6 | <1% |
From the original article
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.