Virtual Interrupt Injection Vulnerability in Linux Kernel Affecting AMD SEV-SNP and AMD SEV-ES

CVE-2024-25743

Summary

A vulnerability exists in the Linux kernel versions up to 6.9, where an untrusted hypervisor is capable of injecting specific virtual interrupts (0 and 14) at any arbitrary moment. This capability can lead to the triggering of the SIGFPE (Signal Floating Point Exception) signal handler within user applications. The risk mainly impacts systems utilizing AMD's Secure Encrypted Virtualization technologies, specifically SEV-SNP and SEV-ES, thereby posing potential threats to the integrity and availability of running applications.

References