CVE-2021-26311: vulnerability in AMD SEV/SEV-ES
AMD Secure Encrypted Virtualization
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A vulnerability in AMD's secure virtualization feature (SEV/SEV-ES) allows a malicious hypervisor administrator to secretly rearrange memory in a virtual machine without being detected, potentially enabling them to execute arbitrary code inside the guest VM.
The AMD SEV/SEV-ES attestation mechanism fails to detect memory rearrangement attacks in the guest address space. A privileged hypervisor operator can exploit this to modify memory layout post-attestation, bypassing integrity checks and achieving arbitrary code execution within the guest VM with administrative access to the host.
In the same product, most dangerous first.