igvm

igvm This project is the home of the Independent Guest Virtual Machine IGVM file format. The format specification can be found in the igvmdefs crate, with a Rust implementation of the binary format in the igvm crate. The IGVM file format is designed to encapsulate all information required to laun...

cve-2023-46813-poc

CVE-2023-46813 PoC 1. Apply the patches in the host-patches folder to the Linux host and QEMU. 2. Start an SEV-SNP VM. 3. Run the code in this repo and wait for the message "waiting for the hypervisor to change memory to MMIO". 4. Spam the attack command in QEMU several times. 5. Once the exploit...

CVE-2019-10149

CVE-2019-10149 SNP Assignment 关于一个 Linux 漏洞...

cve-2023-31346-poc

Fuga de Memoria del Firmware El código aquí tiene como objetivo demostrar las fugas de memoria en los encabezados de mensajes de invitado y en el mensaje de invitado de solicitud de CPUID. Prerrequisitos Instalar rustup. Instalar un kernel de Linux con soporte de host SEV-SNP. Utilicé un kernel c...

cve-2024-21978-poc

Vulnerabilidad en el firmware SEV Este repositorio contiene un exploit para una vulnerabilidad en el firmware SEV. El exploit permite descifrar memoria arbitraria de un invitado SEV-SNP en ejecución. Probado en la versión 1.55.16 la más reciente en el momento de escribir esto. Causa raíz El campo...

IT19115276

IT19115276 SNP Assignment 1 Report - Linux box exploitation Vulnerability CVE-2014-0038 I have explained about how to exploit this vulnerability with screenshots...

POC_CVE-2025-29943_Write-what-where-Condition

StackWarp: PoC for CVE-2025-29943 Prueba de concepto para la vulnerabilidad de hardware StackWarp CVE-2025-29943 en procesadores AMD. Esta falla permite a un atacante con privilegios de administrador en un host hipervisor manipular la configuración de la canalización de la CPU para corromper el...

cve-2023-31355-poc

Vulnerabilidad del Firmware SEV Este repositorio contiene un exploit para una vulnerabilidad en el firmware SEV. El exploit permite descifrar memoria arbitraria de un invitado SEV-SNP después de haber sido dado de baja. Probado en la versión 1.55.16 la más reciente al momento de escribir. Causa...

cve-2023-20573-poc

PoC 使用方法 本仓库包含一个 VMM，它使用自定义内核启动 SEV-SNP 虚拟机。该 VMM 和内核是我个人项目的一个精简版本。需要在主机上运行经过修改的 Linux 内核：https://github.com/Freax13/linux/tree/for-amd。 可按照以下方式运行概念验证： root@kitploit: cd host cargo run -p vmm 说明 该代码在两条指令之间来回跳转： root@kitploit: 2: nop jmp 2b 当 FLAGS 寄存器中的 TF 标志被设置时，异常应被生成，且指令指针将在两条指令之间交替。...

SNP

Este repositorio no tiene un README...

CVE-2026-53360-POC

CVE-2026-53360: KVM SEV-SNP PSC heap out-of-bounds Proof of concept for a heap out-of-bounds read and write in KVM's SEV-SNP Page State Change PSC handling. A malicious SEV-SNP guest makes the host kernel walk a PSC entry array off the end of its slab allocation. That leaks the layout of...

SNP

This repository does not have a README...

Linux Distros Unpatched Vulnerability : CVE-2026-80853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for DE,ENCRYPT ops on SNP-enabled hosts When de,encrypting...

SUSE CVE-2026-80853

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for DE,ENCRYPT ops on SNP-enabled hosts When de,encrypting memory of an SEV or SEV-ES guest on an SNP-enabled host via a temporary buffer, allocate a full 4KiB page for the buffer to ensure the page...

CVE-2026-80853

CVE-2026-80853 affects the Linux kernel KVM subsystem on SNP-enabled hosts . When KVM performs {de,en}crypt operations for an SEV or SEV-ES guest, it used a sub-page allocation for its temporary buffer. On SNP platforms, pages written by firmware are temporarily transferred to Firmware ownership ...

CVE-2026-80853

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for DE,ENCRYPT ops on SNP-enabled hosts When de,encrypting memory of an SEV or SEV-ES guest on an SNP-enabled host via a temporary buffer, allocate a full 4KiB page for the buffer to ensure the page...

EUVD-2026-71303

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for DE,ENCRYPT ops on SNP-enabled hosts When de,encrypting memory of an SEV or SEV-ES guest on an SNP-enabled host via a temporary buffer, allocate a full 4KiB page for the buffer to ensure the page...

CVE-2026-80853 KVM: SEV: Allocate full pages for {DE,EN}CRYPT ops on SNP-enabled hosts

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Allocate full pages for DE,ENCRYPT ops on SNP-enabled hosts When de,encrypting memory of an SEV or SEV-ES guest on an SNP-enabled host via a temporary buffer, allocate a full 4KiB page for the buffer to ensure the page...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel before version 6.9, a trusted-to-non-trusted hypervisor can inject Virtual Interrupt 29 VC at any point in time and can trigger its handler. This affects AMD SEV-SNP and AMD SEV-ES...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: x86/sev: Evicting cache lines during SNP memory validation A vulnerability related to SNP cache coherence requires a cache line eviction mitigation when validating memory after a page state change to private. The specific...