CVE-2023-54296

A flaw was found in the Linux kernel's KVM SVM implementation for AMD SEV-ES. During intrahost VM migration, KVM incorrectly retrieves source vCPUs from the destination VM instead of the source VM. This causes the VMSA (Virtual Machine Save Area) pointer to remain NULL, leading to a host kernel crash when the VM is destroyed or during subsequent vCPU operations.

This bug affects AMD systems using SEV-ES (Secure Encrypted Virtualization - Encrypted State) with VM migration capabilities. The flaw can crash the host kernel from a guest operation, representing a guest-to-host denial of service. However, exploitation requires the ability to perform SEV-ES VM migrations, which typically needs elevated privileges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.