Total vulnerabilities in the database
A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES). A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction (for example, outs or ins) using the exit reason SVM_EXIT_IOIO. This issue results in a crash of the entire system or a potential guest-to-host escape scenario.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 5.11 | 5.14.16 |
| redhat / enterprise_linux | 8.0 | 8.0.x |
| fedoraproject / fedora | 35 | 35.x |
| canonical / ubuntu_linux | 20.04 | 20.04.x |
| canonical / ubuntu_linux | 21.10 | 21.10.x |