cve-2023-31346-poc

Perdita di memoria del firmware Il codice qui mira a dimostrare le perdite di memoria negli header dei messaggi guest e nel messaggio guest della richiesta CPUID. Prerequisiti Installare rustup. Installare un kernel Linux con supporto host SEV-SNP. Ho usato un kernel con alcune mie patch...

cve-2023-20573-poc

Utilizzo del PoC Questa repository contiene un VMM che avvia un guest SEV-SNP con un kernel personalizzato. Il VMM e il kernel sono una versione ridotta di un mio progetto. Per l'esecuzione sull'host è richiesto un kernel Linux modificato: https://github.com/Freax13/linux/tree/for-amd. La Proof o...

igvm

igvm Dieses Projekt ist die Heimat des Independent Guest Virtual Machine IGVM-Dateiformats. Die Formatspezifikation befindet sich in der igvmdefs-Crate, mit einer Rust-Implementierung des Binärformats in der igvm-Crate. Das IGVM-Dateiformat ist darauf ausgelegt, alle Informationen zu kapseln, die...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel before version 6.9, a trusted-to-non-trusted hypervisor can inject Virtual Interrupt 29 VC at any point in time and can trigger its handler. This affects AMD SEV-SNP and AMD SEV-ES...

CVE-2026-33697 CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys

Cocos AI is a confidential computing system for AI. The current implementation of attested TLS aTLS in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel TDX deployment targets supported by CoCoS...

CVE-2026-33697 CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys

Cocos AI is a confidential computing system for AI. The current implementation of attested TLS aTLS in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel TDX deployment targets supported by CoCoS...

PT-2026-28509

Name of the Vulnerable Software and Affected Versions Cocos AI versions 0.4.0 through 0.8.2 Description Cocos AI, a confidential computing system for AI, has a weakness in its attested TLS aTLS implementation. This allows for a relay attack where an attacker may be able to extract the ephemeral T...

Linux Distros Unpatched Vulnerability : CVE-2025-29952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Initialization within the AMD Secure Encrypted Virtualization SEV firmware can allow an admin privileged attacker to corrupt RMP covered memory,...

Linux Distros Unpatched Vulnerability : CVE-2025-29948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting ...

CVE-2025-29948

Improper access control in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory integrity...

CVE-2025-0033

Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a loss of SEV-SNP guest memory integrity...

EUVD-2025-34221

Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a loss of SEV-SNP guest memory integrity...

EUVD-2020-5247

Malware in sbrugna...

EUVD-2021-13117

Malware in sbrugna...

EUVD-2021-13126

Malware in sbrugna...

EUVD-2024-23051

Malicious code in bioql PyPI...

[SECURITY] Fedora 41 Update: rust-sevctl-0.6.2-3.fc41

Administrative utility for AMD SEV...

[SECURITY] Fedora 42 Update: rust-sev-6.1.0-2.fc42

Library for AMD SEV...

[SECURITY] Fedora 42 Update: rust-sevctl-0.6.2-3.fc42

Administrative utility for AMD SEV...

RLSA-2024:3178 Important: linux-firmware security update

The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: hw: intel: Protection mechanism failure for some IntelR PROSet/Wireless WiFi CVE-2022-46329 hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory...