Security tracker / CVE-2024-25742

CVE-2024-25742

x86/coco/sev: Missing check for VMM-injected #VC interrupt

References

• Debian security tracker
• cve.org
• https://bugzilla.redhat.com/show_bug.cgi?id=2270836
• https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3008.html
• https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=e3ef461af35a8c74f2f4ce6616491ddb355a208f
• https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=f35e46631b28a63ca3887d7afef1a65a5544da52
• https://benschlueter.com/assets/paper/WeSee.pdf

Notes

 bwh> This is a weakness in support for AMD SEV-SNP which was added
 bwh> in 5.19.  Earlier versions of SEV don't promise VM integrity
 bwh> so I don't think this is worth addressing in 5.10.

Bugs

Status

Branch	Status
upstream	released (6.7-rc5) [b82a8dbd3d2f4563156f7150c6f2ecab6e960b30, be5341eb0d43b1e754799498bd2e8756cc167a41, 55617fb991df535f953589586468612351575704, f4116bfc44621882556bbf70f5284fbf429a5cf6], released (6.9-rc1) [e3ef461af35a8c74f2f4ce6616491ddb355a208f]
6.18-upstream-stable
6.17-upstream-stable
6.12-upstream-stable
6.6-upstream-stable	released (6.6.7) [34c686e5be2fa1c03ae09568159a9ef37d1c7cf5, 4591766ff6552339fbaa3d3c71814faef1988c2f, 22ca647c8f880f21881e9b2d38070dc61196a39d, 239bff0171a86e1bafd7da03631d74df1dfec6f1], needed
6.1-upstream-stable	released (6.1.68) [b8ec27ae221eee458b15b700706db311474ac619, d5f999317e83efc07b8a7d26f9556b1271a6d373, e09d243a518b5634201f88a5d894e8dc4d37215c, cde700ceb0eaad67792fb2c22f44bf8a08e548f5], needed
5.10-upstream-stable	ignored "SEV-SNP not supported"
4.19-upstream-stable	ignored "EOL"
sid	released (6.6.8-1), released (6.9.7-1)
6.12-trixie-security
6.1-bookworm-security	released (6.1.69-1), needed
5.10-bullseye-security	ignored "SEV-SNP not supported"
4.19-buster-security	ignored "EOL"