CVE-2026-53360-POC

CVE-2026-53360: KVM SEV-SNP PSC 堆越界 KVM 中 SEV-SNP 页面状态变更 PSC 处理的一个堆越界读取和写入概念验证。恶意 SEV-SNP 客户机使主机内核遍历 PSC 条目数组超出其 slab 分配末端。这会泄露相邻 kmalloc-cg-32 对象的布局，并向其中写入受控的小值，且客户机可以任意重复此操作。 完整文章：https://cyberstan.co.uk/sev-snp-oob/ | ---|--- CVE| CVE-2026-53360 组件| KVM SNP 主机支持，arch/x86/kvm/svm/sev.c 引入|...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Requires the use of a scratch area if GHCB v2+ is in use According to the GHCB specification, when using GHCB v2+, it is required that the software scratch area resides in the GHCB’s shared buffer. Note that features li...

UBUNTU-CVE-2026-53360

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use As per the GHCB spec, when using GHCB v2+ require the software scratch area to reside in the GHCB's shared buffer. Note, things like Page State Change PSC requests rely...