The Linux kernel's KVM SEV component had a vulnerability where the maximum length of the in-GHCB scratch area was not correctly computed. Initially, the length parameter was used as the maximum size for MMIO emulation, which was safe. However, for PSC requests, the length parameter represented only the minimum required size, causing KVM to underestimate the scratch area size and potentially leading to buffer overflows. The patch corrects this by setting the effective length to the maximum possible size between the guest pointer and the end of the shared buffer, preventing overflow conditions.

This vulnerability could allow a buffer overflow in the KVM SEV GHCB scratch area handling, potentially leading to memory corruption within the virtualized environment. No known exploits are reported in the wild. The impact is limited to environments using KVM with SEV and GHCB features.

A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include this patch to ensure the correct computation of the GHCB scratch area length and prevent buffer overflows. Since this is a kernel-level issue, updating to a patched kernel version is the recommended remediation. Patch status is not explicitly stated in the provided data; users should consult the Linux kernel vendor advisory for the exact fixed versions and update accordingly.