GSD-2021-1000492 x86/sev-es: Don't return NULL from sev_es_get_ghcb()

x86/sev-es: Don't return NULL from sevesgetghcb This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.7 by commit...

PT-2021-28970

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.10.39 Description The issue is related to the function sev es get ghcb, which should not return NULL. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-28957

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.6 Description The issue is related to the function sev es get ghcb, which should not return NULL. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-24976

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.10.39 Description: The issue is related to the function sev es get ghcb, which should not return NULL. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2021-24963

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.12.6 Description: The issue is related to the function sev es get ghcb, which should not return NULL. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

CVE-2021-26311

In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to...

CVE-2020-12967

The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor...

Design/Logic Flaw

In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to...

Design/Logic Flaw

The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor...

CVE-2021-26311

CVE-2021-26311 concerns AMD SEV/SEV-ES where memory can be rearranged in the guest address space without attestation detection, potentially enabling arbitrary code execution in a guest VM if a malicious administrator with server-hypervisor access acts. Documents cite the vulnerability in SEV/SEV-...

CVE-2021-26311 AMD Secure Encrypted Virtualization

In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to...

CVE-2020-12967

CVE-2020-12967 relates to AMD SEV/SEV-ES: the lack of nested page table protection could allow arbitrary code execution in a guest VM if a malicious administrator gains control of the server hypervisor. Affected are AMD SEV/SEV-ES-enabled platforms (e.g., AMD EPYC family). The root cause is insuf...

CVE-2020-12967 AMD Secure Encrypted Virtualization

The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor...

CVE-2021-26311: Improper Neutralization of Special Elements used in a Command

In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to...

PT-2021-16998

Name of the Vulnerable Software and Affected Versions AMD SEV/SEV-ES feature affected versions not specified Description The issue concerns the AMD SEV/SEV-ES feature, where memory can be rearranged in the guest address space without being detected by the attestation mechanism. This could...

PT-2021-9518

Name of the Vulnerable Software and Affected Versions AMD SEV/SEV-ES feature affected versions not specified Description The issue is related to the lack of nested page table protection in the AMD SEV/SEV-ES feature. This could potentially lead to arbitrary code execution within the guest VM if a...

CVE-2020-12967: Improper Neutralization of Special Elements used in a Command

The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor...