Benedict Schlã¼Ter

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.9 Description: The issue is related to the implementation of the SEV-SNP and SEV-ES mechanisms in the Linux kernel. An untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and trigger its handler, potentially affecting the confidentiality and integrity of protected information. This can be done by injecting a virtual interrupt, which can have an impact on the system's security. Recommendations: For Linux kernel versions prior to 6.9, consider disabling the virtual interrupt 29 (#VC) handler as a temporary workaround until a patch is available. Restrict access to the SEV-SNP and SEV-ES mechanisms to minimize the risk of exploitation. Update to a version of the Linux kernel that is 6.9 or later to fully resolve the issue.

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.9 Description: The issue is related to the implementation of the SEV-SNP and SEV-ES protective mechanisms in the Linux kernel, which can be exploited by an untrusted hypervisor to inject virtual interrupts and trigger the SIGFPE signal handler in userspace applications. This can potentially impact the confidentiality and integrity of protected information. An estimated number of affected devices is not provided, and there is no information about real-world incidents where this issue was exploited. Recommendations: For Linux kernel versions prior to 6.9, update to a version that includes the fix for this issue to prevent potential exploitation. As a temporary workaround, consider restricting access to the SIGFPE signal handler in userspace applications until a patch is available.