CVE-2024-25742
Description
A vulnerability was found in AMD SEV-SNP, where a malicious hypervisor can potentially break confidentiality and integrity of SEV-SNP on Linux guests by injecting interrupts. An attacker can inject interrupt 0x80, which is used by Linux for legacy 32-bit system calls, and arbitrarily change the value stored in EAX while a SEV VM is running.
Statement
Moderate-impact vulnerability affecting Red Hat Enterprise Linux kernel and kernel-rt packages in affected RHEL 8 and RHEL 9 update streams, as well as certain Hosted OpenShift Clusters. A malicious hypervisor hosting an AMD SEV-SNP Linux guest can inject a #VC exception or interrupt 0x80 without the guest validating that a legitimate event caused it; the guest's #VC handler can then emulate an instruction that writes attacker-controlled data to the guest or exposes guest data, breaking confidentiality and integrity. Red Hat's current CVSS v3 score is 7.1 (IMPORTANT; AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N), while the overall impact is MODERATE; the CISA score is 6.5 (MODERATE). Delegated affected RHEL kernel and kernel-rt entries are being pursued for fixes. Fedora and the RHEL 6 and RHEL 7 ELS kernel entries are marked not affected in the current affects; the record supplies no additional product-specific rationale. Some kpatch and Hosted OpenShift entries are tracked as WONTFIX or Can't Do.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 7.1 | N/A | 6.5 |
| Attack Vector | Local | N/A | Local |
| Attack Complexity | Low | N/A | High |
| Privileges Required | Low | N/A | Low |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | High | N/A | High |
| Integrity Impact | High | N/A | High |
| Availability Impact | None | N/A | Low |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
cve.org: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
