Lucene search

K
osvGoogleOSV:PUB-A-342511931
HistorySep 01, 2024 - 12:00 a.m.

S2MPUs under kernel control allow host to read from hyp and pVM memory

2024-09-0100:00:00
Google
osv.dev
2
s2mpus
kernel
hyp memory
pvm memory
arbitrary read
insecure default value
local information disclosure
system execution privileges.

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.4

Confidence

High

EPSS

0

Percentile

9.6%

there is a possible arbitrary read due to an insecure default value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.4

Confidence

High

EPSS

0

Percentile

9.6%

Related for OSV:PUB-A-342511931