CVE-2023-4155

Summary

CVE-2023-4155: A significant vulnerability was identified in the KVM AMD Secure Encrypted Virtualization (SEV) feature in the Linux kernel. This issue allows a KVM guest with multiple vCPUs utilizing SEV-ES or SEV-SNP to trigger a double fetch race condition, causing the `VMGEXIT` handler to execute recursively. An attacker exploiting this vulnerability can induce a stack overflow and result in a denial of service. In certain kernel configurations without stack guard pages (`CONFIG_VMAP_STACK`), the vulnerability may potentially enable guest-to-host escapes.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.