cve-2023-46813-poc

CVE-2023-46813 PoC 1. طبّق التصحيحات الموجودة في مجلد host-patches على مضيف Linux وQEMU. 2. شغّل جهازًا افتراضيًا بتقنية SEV-SNP. 3. شغّل الكود في هذا المستودع وانتظر رسالة "waiting for the hypervisor to change memory to MMIO". 4. أرسل أمر attack بشكل متكرر في QEMU عدة مرات. 5. بمجرد أن يكتشف...

igvm

igvm This project is the home of the Independent Guest Virtual Machine IGVM file format. The format specification can be found in the igvmdefs crate, with a Rust implementation of the binary format in the igvm crate. The IGVM file format is designed to encapsulate all information required to laun...

CVE-2026-80853

CVE-2026-80853 affects the Linux kernel KVM subsystem on SNP-enabled hosts . When KVM performs {de,en}crypt operations for an SEV or SEV-ES guest, it used a sub-page allocation for its temporary buffer. On SNP platforms, pages written by firmware are temporarily transferred to Firmware ownership ...

cve-2024-21978-poc

ثغرة في البرنامج الثابت الخاص بـ SEV يحتوي هذا المستودع على استغلال exploit لثغرة في البرنامج الثابت الخاص بـ SEV. يتيح الاستغلال فك تشفير ذاكرة اعتباطية من ضيف SEV-SNP قيد التشغيل. تم اختباره على الإصدار 1.55.16 أحدث إصدار وقت كتابة هذا النص. السبب الجذري يمكن استخدام حقل nvpaddr الخاص بأمر...

cve-2023-31355-poc

Vulnérabilité du firmware SEV Ce dépôt contient un exploit pour une vulnérabilité dans le firmware SEV. L'exploit permet de déchiffrer la mémoire arbitraire d'un invité SEV-SNP après qu'il a été décommissionné. Testé sur la version 1.55.16 dernière version au moment de la rédaction. Cause racine...

cve-2023-31346-poc

تسرب الذاكرة في البرنامج الثابت يهدف الكود هنا إلى إظهار تسرب الذاكرة في رؤوس رسائل الضيف ورسالة الضيف الخاصة بطلب CPUID. المتطلبات الأساسية ثبّت rustup. ثبّت نواة Linux مع دعم مضيف SEV-SNP. استخدمت نواة تحتوي على بعض التصحيحات الخاصة بي...

cve-2023-20573-poc

Utilisation du PoC Ce dépôt contient un VMM qui démarre un invité SEV-SNP avec un noyau personnalisé. Le VMM et le noyau sont une version allégée d'un de mes projets. Un noyau Linux modifié est nécessaire pour fonctionner sur l'hôte : https://github.com/Freax13/linux/tree/for-amd. La preuve de...

POC_CVE-2025-29943_Write-what-where-Condition

StackWarp: PoC for CVE-2025-29943 Proof of concept for the StackWarp hardware vulnerability CVE-2025-29943 in AMD processors. This flaw allows an attacker with administrator privileges on a host hypervisor to manipulate the CPU pipeline configuration to corrupt the stack pointer within a SEV-SNP...

CVE-2026-53360-POC

CVE-2026-53360: KVM SEV-SNP PSC heap out-of-bounds Proof of concept for a heap out-of-bounds read and write in KVM's SEV-SNP Page State Change PSC handling. A malicious SEV-SNP guest makes the host kernel walk a PSC entry array off the end of its slab allocation. That leaks the layout of...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel before version 6.9, a trusted-to-non-trusted hypervisor can inject Virtual Interrupt 29 VC at any point in time and can trigger its handler. This affects AMD SEV-SNP and AMD SEV-ES...

SUSE CVE-2026-72239

In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSRAMD64SYSCFGSNPEN" Revert 99cf1fb58e68 "x86/virt/sev: Drop WBINVD before setting MSRAMD64SYSCFGSNPEN". Section 8.8 of the SNP spec says: Before invoking SNPINITEX with INITRMP se...

CVE-2026-72286

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM with Secure Encrypted Virtualization SEV and Secure Nested Paging SNP virtual machines. The intra-host migration and mirroring feature is not fully implemented for SEV-SNP VMs. This incomplete implementation means that critic...

CVE-2026-72239

A flaw was found in the Linux kernel, specifically within the Secure Encrypted Virtualization-Secure Nested Paging SEV-SNP feature. This vulnerability involves a timing issue, or race condition, during the process of clearing processor caches. If not handled correctly, this can lead to a situatio...

Linux Distros Unpatched Vulnerability : CVE-2026-72286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host migration/mirroring feature is not fully implemented for SEV-SNP VMs. The proper...

CVE-2026-74404

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix snpfilterreservedmemregions off-by-one Sashiko notes: regarding the bounds check in snpfilterreservedmemregions called via walkiomemresdesc: does the check if rangelist-numelements 16 + 8 PAGESIZE allow an...

CVE-2026-72286

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host migration/mirroring feature is not fully implemented for SEV-SNP VMs. The proper migration requires additional SNP-specific state such as...

UBUNTU-CVE-2026-72286

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host migration/mirroring feature is not fully implemented for SEV-SNP VMs. The proper migration requires additional SNP-specific state such as...

CVE-2026-72239

In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSRAMD64SYSCFGSNPEN" Revert 99cf1fb58e68 "x86/virt/sev: Drop WBINVD before setting MSRAMD64SYSCFGSNPEN". Section 8.8 of the SNP spec says: Before invoking SNPINITEX with INITRMP se...

UBUNTU-CVE-2026-72239

In the Linux kernel, the following vulnerability has been resolved: x86/virt/sev: Revert "Drop WBINVD before setting MSRAMD64SYSCFGSNPEN" Revert 99cf1fb58e68 "x86/virt/sev: Drop WBINVD before setting MSRAMD64SYSCFGSNPEN". Section 8.8 of the SNP spec says: Before invoking SNPINITEX with INITRMP se...

CVE-2026-72286

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host migration/mirroring feature is not fully implemented for SEV-SNP VMs. The proper migration requires additional SNP-specific state such as...