Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4155
HistorySep 13, 2023 - 5:15 p.m.

Race condition

2023-09-1317:15:00
PRIOn knowledge base
www.prio-n.com
9
kvm
amd
sev
race condition
vulnerability
linux kernel
double fetch
vmgexit
stack overflow
denial of service
guest-to-host escape
stack guard pages

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

A flaw was found in KVM AMD Secure Encrypted Virtualization (SEV) in the Linux kernel. A KVM guest using SEV-ES or SEV-SNP with multiple vCPUs can trigger a double fetch race condition vulnerability and invoke the VMGEXIT handler recursively. If an attacker manages to call the handler multiple times, they can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages (CONFIG_VMAP_STACK).