Untrusted Hypervisor Injection Vulnerability Affects AMD SEV-SNP and AMD SEV-ES
CVE-2024-25742

6.5MEDIUM

Key Information:

Vendor

Linux
Vendor
CVE Published:
17 May 2024

What is CVE-2024-25742?

A vulnerability exists within the Linux kernel prior to version 6.9, where an untrusted hypervisor has the capability to inject virtual interrupt 29 (#VC) at any time, triggering its handler. This situation poses a significant risk to the security of virtualized environments, specifically affecting systems utilizing AMD’s Secure Encrypted Virtualization features, including SEV-SNP and SEV-ES. Proper mitigation strategies are essential to safeguard systems against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.amd.com/en/resources/product-security/bulleti...
https://github.com/torvalds/linux/commit/e3ef461af35a8c74...
https://git.kernel.org/cgit/linux/kernel/git/torvalds/lin...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.