cve-2023-31346-poc

固件内存泄漏 这里的代码旨在演示客户机消息头和 CPUID 请求客户机消息中的内存泄漏。 先决条件 安装 rustup。 安装带有 SEV-SNP 主机支持的 Linux 内核。我使用的是带有我自己一些补丁的内核 https://github.com/Freax13/linux/tree/snp-host-v9-rfc-with-my-patches。 使用方法 1. 重新启动机器 2. 在 host 目录中运行 cargo make run run。 3. 在日志中观察固件初始化后 pAlignedPTReqPayload 泄漏起始值。 4. 在 host 目录中运行 cargo ma...

cve-2023-20573-poc

PoC 사용법 이 저장소는 사용자 정의 커널로 SEV-SNP 게스트를 부팅하는 VMM을 포함합니다. VMM과 커널은 제 프로젝트의 축소 버전입니다. 호스트에서 실행하려면 수정된 Linux 커널이 필요합니다: https://github.com/Freax13/linux/tree/for-amd. 이 PoC는 다음과 같이 실행할 수 있습니다: root@kitploit: cd host cargo run -p vmm 설명 이 코드는 두 명령어 사이를 오가며 점프합니다: root@kitploit: 2: nop jmp 2b FLAGS...

igvm

igvm Dieses Projekt ist die Heimat des Independent Guest Virtual Machine IGVM-Dateiformats. Die Formatspezifikation befindet sich in der igvmdefs-Crate, mit einer Rust-Implementierung des Binärformats in der igvm-Crate. Das IGVM-Dateiformat ist darauf ausgelegt, alle Informationen zu kapseln, die...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel before version 6.9, a trusted-to-non-trusted hypervisor can inject Virtual Interrupt 29 VC at any point in time and can trigger its handler. This affects AMD SEV-SNP and AMD SEV-ES...

CVE-2026-33697 CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys

Cocos AI is a confidential computing system for AI. The current implementation of attested TLS aTLS in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel TDX deployment targets supported by CoCoS...

CVE-2026-33697 CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys

Cocos AI is a confidential computing system for AI. The current implementation of attested TLS aTLS in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel TDX deployment targets supported by CoCoS...

PT-2026-28509

Name of the Vulnerable Software and Affected Versions Cocos AI versions 0.4.0 through 0.8.2 Description Cocos AI, a confidential computing system for AI, has a weakness in its attested TLS aTLS implementation. This allows for a relay attack where an attacker may be able to extract the ephemeral T...

Linux Distros Unpatched Vulnerability : CVE-2025-29952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Initialization within the AMD Secure Encrypted Virtualization SEV firmware can allow an admin privileged attacker to corrupt RMP covered memory,...

Linux Distros Unpatched Vulnerability : CVE-2025-29948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting ...

CVE-2025-29948

Improper access control in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory integrity...

CVE-2025-0033

Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a loss of SEV-SNP guest memory integrity...

EUVD-2025-34221

Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a loss of SEV-SNP guest memory integrity...

EUVD-2021-13126

Malware in sbrugna...

EUVD-2021-13117

Malware in sbrugna...

EUVD-2020-5247

Malware in sbrugna...

EUVD-2024-23051

Malicious code in bioql PyPI...

[SECURITY] Fedora 41 Update: rust-sevctl-0.6.2-3.fc41

Administrative utility for AMD SEV...

[SECURITY] Fedora 42 Update: rust-sev-6.1.0-2.fc42

Library for AMD SEV...

[SECURITY] Fedora 42 Update: rust-sevctl-0.6.2-3.fc42

Administrative utility for AMD SEV...

RLSA-2024:3178 Important: linux-firmware security update

The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: hw: intel: Protection mechanism failure for some IntelR PROSet/Wireless WiFi CVE-2022-46329 hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory...