72 matches found
cve-2023-31346-poc
펌웨어 메모리 누수 이 코드는 게스트 메시지 헤더와 CPUID 요청 게스트 메시지에서의 메모리 누수를 보여주기 위한 것입니다. 사전 요구 사항 rustup을 설치합니다. SEV-SNP 호스트 지원이 포함된 Linux 커널을 설치합니다. 저는 제 패치 몇 개가 포함된 커널을 사용했습니다. https://github.com/Freax13/linux/tree/snp-host-v9-rfc-with-my-patches 사용법 1. 머신을 재부팅합니다. 2. host 디렉토리에서 cargo make run run을 실행합니다. 3. 펌웨...
igvm
igvm 이 프로젝트는 IGVMIndependent Guest Virtual Machine 파일 형식의 본거지입니다. 형식 사양은 igvmdefs 크레이트에서 찾을 수 있으며, 바이너리 형식의 Rust 구현체는 igvm 크레이트에 있습니다. IGVM 파일 형식은 AMD SEV-SNP 및 Intel TDX와 같은 다양한 격리 기술을 지원하면서, 모든 가상화 스택에서 가상 머신을 실행하는 데 필요한 모든 정보를 캡슐화하도록 설계되었습니다. 개념적으로 이 파일 형식은 파일을 생성한 도구에 의해 만들어진 명령 집합이며, 로더가 초기...
cve-2023-20573-poc
PoC 사용법 이 저장소는 사용자 정의 커널로 SEV-SNP 게스트를 부팅하는 VMM을 포함합니다. VMM과 커널은 제 프로젝트의 축소 버전입니다. 호스트에서 실행하려면 수정된 Linux 커널이 필요합니다: https://github.com/Freax13/linux/tree/for-amd. 이 PoC는 다음과 같이 실행할 수 있습니다: cd host cargo run -p vmm 설명 이 코드는 두 명령어 사이를 오가며 점프합니다: 2: nop jmp 2b FLAGS 레지스터에서 TF 플래그가 설정되면 명령어 포인터가 두 명령...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel before version 6.9, a trusted-to-non-trusted hypervisor can inject Virtual Interrupt 29 VC at any point in time and can trigger its handler. This affects AMD SEV-SNP and AMD SEV-ES...
INTCC: A Framework for Interactive Confidential Computing
Confidential computing leverages Trusted Execution Environments TEEs to ensure the confidentiality and integrity of data in use. However, TEEs rely on remote attestation to guarantee the integrity of their initial memory state. This model is fundamentally at odds with interactive development...
CVE-2026-100839
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...
EUVD-2026-87849
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...
CVE-2026-100839 Contrast before 1.18.0 AML Injection Remote Code Execution
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...
CVE-2026-100839: Improper Control of Generation of Code
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack "BadAML". ACPI tables containing AML bytecode are passed from the untrusted host QEMU to the guest firmware OVMF and on to the Linu...
CVE-2026-92702 Cocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP path
Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil,...
CVE-2026-92702 Cocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP path
Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil,...
EUVD-2026-83192
Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil,...
PT-2026-95557
Name of the Vulnerable Software and Affected Versions Cocos AI versions prior to 0.9.0 Description Cocos AI is a confidential computing system designed for running AI workloads within trusted execution environments. The intra-handshake attested TLS aTLS AMD SEV-SNP verification path fails to...
CVE-2026-92702: Origin Validation Error
Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS aTLS AMD SEV-SNP verification path does not enforce attestation freshness when the expected reportData value is nil,...
New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing
Researchers have disclosed a new hardware attack, called DDRop , that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server's memory, so the processor keeps reading old encrypted data as if it were current. The attack requires an attacker who...
PT-2026-94126
Уязвимость реализации технологий конфиденциальных вычислений Intel TDX, Intel Scalable SGX и AMD SEV-SNP микропрограммного обеспечения процессоров Intel и AMD связана с недостаточной проверкой подлинности данных. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на...
CVE-2026-33697: Key Exchange without Entity Authentication
Cocos AI is a confidential computing system for AI. The current implementation of attested TLS aTLS in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel TDX deployment targets supported by CoCoS...
CVE-2026-33697 CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys
Cocos AI is a confidential computing system for AI. The current implementation of attested TLS aTLS in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel TDX deployment targets supported by CoCoS...
CVE-2026-33697 CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys
Cocos AI is a confidential computing system for AI. The current implementation of attested TLS aTLS in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel TDX deployment targets supported by CoCoS...
PT-2026-28509
Name of the Vulnerable Software and Affected Versions Cocos AI versions 0.4.0 through 0.8.2 Description Cocos AI, a confidential computing system for AI, has a weakness in its attested TLS aTLS implementation. This allows for a relay attack where an attacker may be able to extract the ephemeral T...