Ubuntu Advises on Linux Kernel NVIDIA Vulnerabilities
Original title: USN-9003-1: Linux kernel (NVIDIA) vulnerabilities
Ubuntu releases security update for Linux kernel flaws, including CVE-2023-20585 allowing out-of-bounds conditions in SEV-SNP guests.
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. The update corrects flaws in ARM64, NVDIMM, Handshake API, ARM32, MIPS, OpenRISC, PowerPC, RISC-V and other subsystems. One specific issue involves AMD processors and IOMMU checks on host buffers.
Unconfirmed: Versions not specified in advisory
- Flaws affect multiple kernel subsystems
- CVE-2023-20585 noted for SEV-SNP guests
- Local attacker with hypervisor access possible
- Update corrects ARM64, NVDIMM and others
Impact: out-of-bounds condition in SEV-SNP guest memory
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-20585 | Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds… | 5.6 | <1% |
From the original article
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.