CVE-2020-36311
kernel: DoS by triggering destruction of a large SEV VM
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 11, 2020
Updated · October 9, 2026
Description
A flaw was found in the Linux kernel. This flaw allows attackers to cause a denial of service (soft lockup) by triggering the destruction of a large SEV VM, which requires unregistering many encrypted regions. The highest threat from this vulnerability is to system availability.
Statement
This issue does not affect the versions of the kernel packages as shipped with the Red Hat Enterprise Linux 6 and 7, as they did not include support for SEV. Red Hat Enterprise Linux 8 currently provides SEV as a Technology Preview. Using SEV in a production environment is discouraged. See https://access.redhat.com/articles/4491591.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 2.8CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CWE not specified