EUVD-2026-123040

Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging SEV-SNP could allow a privileged attacker to potentially overlap MMIO regions with DRAM regions resulting in loss of integrity...

CVE-2026-40670

Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging SEV-SNP could allow a privileged attacker to potentially overlap MMIO regions with DRAM regions resulting in loss of integrity...

CVE-2026-40670

Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging SEV-SNP could allow a privileged attacker to potentially overlap MMIO regions with DRAM regions resulting in loss of integrity...

CVE-2026-40670

AMD Secure Encrypted Virtualization (SEV) firmware is vulnerable to CVE-2026-40670 due to an improper check for unusual or exceptional conditions in the Secure Nested Paging (SEV-SNP) component. This flaw could allow a privileged attacker to potentially overlap MMIO regions with DRAM regions , wh...

PT-2026-144848

Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging SEV-SNP could allow a privileged attacker to potentially overlap MMIO regions with DRAM regions resulting in loss of integrity...

CVE-2026-40670: AMD: Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging…

Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging SEV-SNP could allow a privileged attacker to potentially overlap MMIO regions with DRAM regions resulting in loss of integrity...

AMD SEV-SNP: A Confidential Computing Primer

This paper is a technical primer on AMD Secure Encrypted Virtualization with Secure Nested Paging SEV-SNP, a hardware confidential computing implementation that provides Trusted Execution Environments TEEs for virtual machines. SEV-SNP treats the hypervisor as adversarial. It encrypts guest memor...

CVE-2026-64308

A flaw was found in the Linux kernel's crypto: ccp module, which handles AMD Secure Encrypted Virtualization SEV and Secure Nested Paging SNP features. A local user, by sending specific commands through the /dev/sev interface, could exploit improper initialization handling. If SEV initialization...

CVE-2026-64309

A flaw was found in the Linux kernel's crypto: ccp module. This vulnerability arises from improper initialization of Secure Nested Paging SNP when handling the ioctlSNPCOMMIT command. A local userspace process can exploit this by sending specific commands via /dev/sev ioctls. If Secure Encrypted...

CVE-2026-64285

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component, specifically within the Secure Nested Paging SNP guest functionality. When KVM populates a guest's CPUID Central Processor Unit Identifier data, it may attempt to write to a source memory page that is intended to b...

SUSE CVE-2026-64307

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPCONFIG Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and ze...

SUSE CVE-2026-64310

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for SEV ioctls Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and zero o...

CVE-2026-64309

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPCOMMIT Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and ze...

CVE-2026-64310

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for SEV ioctls Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and zero o...

CVE-2026-64309

CVE-2026-64309 is a Linux kernel vulnerability in the crypto: ccp (SEV-SNP) subsystem. The SNP_COMMIT ioctl would perform SNP initialization even when the component was previously uninitialized. Since the SNP_COMMIT command is valid in the UNINIT firmware state, this could cause side effects: if ...

CVE-2026-64307

CVE-2026-64307 is a Denial of Service in the Linux kernel's crypto:ccp module (SEV/SNP support). If SEV initialization fails while KVM is running active VMs, a local user with low privileges can trigger the SNP_CONFIG ioctl via /dev/sev, causing a re-initialization that zeros out MSR_VM_HSAVE_PA ...

CVE-2026-64307 crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG)

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPCONFIG Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and ze...

CVE-2026-64285 KVM: SEV: Pin source page for write when adding CPUID data for SNP guest

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...

CVE-2026-64285

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...

CVE-2026-64285

CVE-2026-64285 affects the Linux kernel KVM SEV SNP path. When populating a guest’s initial CPUID data, KVM may pin a source page as writable and write back data if the userspace-provided CPUID data is rejected by trusted firmware, risking clobbering read-only memory due to kernel mappings. Multi...