CVE-2026-100839

Name of the Vulnerable Software and Affected Versions Contrast versions prior to 1.18.0

Description The guest kernel's ACPI/AML handling is susceptible to an AML injection attack known as BadAML. ACPI tables containing AML bytecode are transmitted from the untrusted host (QEMU) to the guest firmware (OVMF) and subsequently to the Linux kernel, where the AML interpreter executes them. An attacker with host control can create a table with malicious, Turing-complete AML bytecode. When the guest kernel interprets this bytecode, it gains access to the entire guest memory, including private pages, leading to arbitrary code execution and the potential disclosure or modification of confidential guest data. This issue specifically affects the AMD SEV-SNP platforms Metal-QEMU-SNP and Metal-QEMU-SNP-GPU.

Recommendations Update to version 1.18.0.