CVE-2023-53769

In the Linux kernel, the following vulnerability has been resolved:

virt/coco/sev-guest: Double-buffer messages

The encryption algorithms read and write directly to shared unencrypted memory, which may leak information as well as permit the host to tamper with the message integrity. Instead, copy whole messages in or out as needed before doing any computation on them.

This vulnerability is rated as Moderate by Red Hat. The vulnerability primarily impacts confidentiality and integrity, because plaintext or intermediate values can be observed via shared unencrypted memory and as such there can be host-controlled modifications of the message buffer that can influence what is encrypted or verified and decrypted. Impact on availability is limited to tampering causing request failures or EBADMSG errors. However, triggering this vulnerability most likely requires elevated privileges that correspond to hypervisor or host-level control (typically higher than what a guest local user will possess).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.