CVE-2023-20519

CVE-2023-20519 describes a Use-After-Free in the management of an SNP guest context page, which could let a malicious hypervisor masquerade as the guest’s migration agent and potentially lead to loss of guest integrity. Connected sources (SUSE kernel-firmware advisories) reference this CVE among ...

CVE-2023-20522

CVE-2023-20522 pertains to the AMD Secure Processor (ASP). The issue is described as insufficient input validation in ASP, with a potential attacker who has a malicious BIOS able to cause a denial of service. Public documentation lists affected components as ASP BIOS/firmware, with impact limited...

CVE-2021-46767

Summary: CVE-2021-46767 involves AMD Secure Processor (ASP) and stems from insufficient input validation. An attacker with physical access could exploit ASP to gain unauthorized write access to memory, potentially causing loss of integrity and/or denial of service. The issue is documented across ...

CVE-2021-26409

CVE-2021-26409 affects AMD SEV-ES, where insufficient bounds checking can corrupt the Reverse Map (RMP) memory, potentially compromising SNP memory integrity. Public references identify AMD SEV-ES-related memory integrity risk; mitigation guidance is distributed via AMD’s PSU/AGS updates (AMD-SB-...

CVE-2021-46779

CVE-2021-46779 is an AMD Secure Processor (ASP) vulnerability: insufficient input validation in the SVC_ECC_PRIMITIVE system call could allow a compromised user application or ABL to corrupt ASP OS memory, risking loss of integrity and availability. Connected sources confirm the issue and link to...

CVE-2021-46791

CVE-2021-46791 describes insufficient input validation during parsing of the System Management Mode (SMM) binary, potentially allowing a malicious SMM executable to corrupt DRTM user application memory and cause a denial of service. The vulnerability is associated with AMD’s System Management Mod...

CVE-2021-46768

Summary (CVE-2021-46768) : The issue is insufficient input validation in AMD SEV firmware affecting the ASP boot loader, allowing out-of-bounds memory reads and potentially causing a denial of service. Documents consistently describe this as a vulnerability in SEV firmware with the ASP boot loade...