1147 matches found
Code injection
In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer TLB following a particular sequence of operations that includes creation of a new virtual machine control block VMCB. The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for...
CVE-2021-46744
Technical details about CVE-2021-46744 are not publicly provided in the supplied Connected documents. The initial entry mentions a SEV data-inference risk on AMD SEV guests, but no product/version/root-cause/fix is given here. Monitor for updates.
CVE-2021-46744
An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time...
CVE-2021-26349
Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent MA...
CVE-2021-26349
CVE-2021-26349 is listed as part of multiple SUSE kernel-firmware advisories (SUSE-SU-2022-1923-1 and related updates). The description indicates a vulnerability where failure to assign a new report ID to an imported guest could allow an SEV-SNP guest VM to be tricked into trusting a malicious Mi...
CVE-2021-26342
In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer TLB following a particular sequence of operations that includes creation of a new virtual machine control block VMCB. The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for...
CVE-2021-26342
CVE-2021-26342 is documented in the SUSE kernel-firmware advisories as part of a set of AMD/SEV-related fixes. The vulnerability description states that in SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) after a sequence including creation of a new VMCB, causing th...
PT-2022-9732
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue is related to the failure to assign a new report ID to an imported guest, which may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migrati...
CVE-2021-26349: Undefined Security Weakness
Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent MA...
PT-2022-9729
Name of the Vulnerable Software and Affected Versions AMD SEV guest VMs affected versions not specified Description The CPU may fail to flush the Translation Lookaside Buffer TLB following a particular sequence of operations that includes creation of a new virtual machine control block VMCB. This...
CVE-2021-26342: Undefined Security Weakness
In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer TLB following a particular sequence of operations that includes creation of a new virtual machine control block VMCB. The failure to flush the TLB may cause the microcode to use stale TLB translations which may allow for...
CVE-2021-46744: Observable Discrepancy
An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time...
Ciphertext Side Channels on AMD SEV - Lenovo Support US
No description provided...
CVE-2021-26349
Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent MA...
CVE-2021-26332
Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability...
CVE-2021-26408
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality...
CVE-2021-26408
Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality...
CVE-2021-26332
Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability...