296 matches found
igvm
igvm This project is the home of the Independent Guest Virtual Machine IGVM file format. The format specification can be found in the igvmdefs crate, with a Rust implementation of the binary format in the igvm crate. The IGVM file format is designed to encapsulate all information required to laun...
cve-2023-46813-poc
CVE-2023-46813 PoC 1. host-patches 폴더에 있는 패치를 Linux 호스트와 QEMU에 적용합니다. 2. SEV-SNP VM을 시작합니다. 3. 이 저장소의 코드를 실행하고 "waiting for the hypervisor to change memory to MMIO" 메시지를 기다립니다. 4. QEMU에서 attack 명령을 여러 번 반복 실행합니다. 5. 익스플로잇이 자신의 메모리 일부 유형이 MMIO로 변경되었음을 감지하면 취약점을 사용하여 자신의 자격 증명을 init 작업의 자격 증명으로...
cve-2023-31346-poc
펌웨어 메모리 누수 이 코드는 게스트 메시지 헤더와 CPUID 요청 게스트 메시지에서의 메모리 누수를 보여주기 위한 것입니다. 사전 요구 사항 rustup을 설치합니다. SEV-SNP 호스트 지원이 포함된 Linux 커널을 설치합니다. 저는 제 패치 몇 개가 포함된 커널을 사용했습니다. https://github.com/Freax13/linux/tree/snp-host-v9-rfc-with-my-patches 사용법 1. 머신을 재부팅합니다. 2. host 디렉토리에서 cargo make run run을 실행합니다. 3. 펌웨...
cve-2024-21978-poc
SEV 펌웨어 취약점 이 저장소는 SEV 펌웨어의 취약점에 대한 익스플로잇을 포함합니다. 익스플로잇은 실행 중인 SEV-SNP 게스트의 임의 메모리를 복호화할 수 있습니다. 버전 1.55.16작성 시점 기준 최신에서 테스트되었습니다. 근본 원인 SEVINITEX 명령의 nvpaddr 필드는 펌웨어에 메모리 청크를 기증하는 데 사용될 수 있으며, 이를 통해 영구 플래시 대신 사용할 수 있습니다. SEV-SNP가 활성화된 경우 이 메모리는 FIRMWARE 상태여야 합니다. 펌웨어는 SEVINITEX 명령을 실행하는 동안 확인합니다...
cve-2023-31355-poc
SEV 펌웨어 취약점 이 저장소는 SEV 펌웨어의 취약점에 대한 익스플로잇을 포함합니다. 이 익스플로잇은 SEV-SNP 게스트가 해제decommission된 후 임의의 메모리를 복호화할 수 있게 합니다. 버전 1.55.16작성 시점 기준 최신 버전에서 테스트되었습니다. 근본 원인 snpreclaimbuffer는 주소가 RMP에 포함되지 않은 경우에도 무조건 RMP 변경 사항을 다시 쓰려고 시도합니다. address가 RMP에 포함되지 않은 경우, RMP 항목의 주소인 pagermppaddr는 제대로 초기화되지 않고 초기값인 0...
cve-2023-20573-poc
PoC 사용법 이 저장소는 사용자 정의 커널로 SEV-SNP 게스트를 부팅하는 VMM을 포함합니다. VMM과 커널은 제 프로젝트의 축소 버전입니다. 호스트에서 실행하려면 수정된 Linux 커널이 필요합니다: https://github.com/Freax13/linux/tree/for-amd. 이 PoC는 다음과 같이 실행할 수 있습니다: cd host cargo run -p vmm 설명 이 코드는 두 명령어 사이를 오가며 점프합니다: 2: nop jmp 2b FLAGS 레지스터에서 TF 플래그가 설정되면 명령어 포인터가 두 명령...
POC_CVE-2025-29943_Write-what-where-Condition
StackWarp: PoC for CVE-2025-29943 Proof of concept for the StackWarp hardware vulnerability CVE-2025-29943 in AMD processors. This flaw allows an attacker with administrator privileges on a host hypervisor to manipulate the CPU pipeline configuration to corrupt the stack pointer within a SEV-SNP...
AlmaLinux 9.2 [TuxCare] Security Update: iwl100-firmware / iwl1000-firmware / iwl105-firmware / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1740470712)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1740470712 advisory. - IOMMU improperly handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with...
CVE-2026-53360-POC
CVE-2026-53360: KVM SEV-SNP PSC heap out-of-bounds Proof of concept for a heap out-of-bounds read and write in KVM's SEV-SNP Page State Change PSC handling. A malicious SEV-SNP guest makes the host kernel walk a PSC entry array off the end of its slab allocation. That leaks the layout of...
CVE-2026-100839
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...
CVE-2026-100839 Contrast before 1.18.0 AML Injection Remote Code Execution
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...
EUVD-2026-87849
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...
CVE-2026-100839: Improper Control of Generation of Code
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...
CVE-2026-92702
Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil,...
CVE-2026-92702 Cocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP path
Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil,...
EUVD-2026-83192
Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil,...
CVE-2026-92702
Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2 , the intra-handshake attested TLS (aTLS) AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is ni...
CVE-2026-92702 Cocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP path
Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil,...
CVE-2026-92702 Cocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP path
Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil,...
CVE-2026-92702: Origin Validation Error
Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil,...