Threats Tagged 'ghsa-8vm9-66j5-xm27'

A vulnerability in the Linux kernel's KVM SVM module was fixed to address a page overflow in the sev_dbg_crypt() function during the ENCRYPT path. The issue arises because the per-iteration transfer length was bounded by the source page offset but not by the destination page offset, leading to a potential buffer overflow of up to 15 bytes. This flaw could cause a write beyond the allocated 4096-byte buffer, resulting in memory corruption. The vulnerability was identified and fixed by adding proper bounds checking on the destination offset. The flaw is related to a use-after-free detected by KASAN during debugging. No affected versions are explicitly stated in the provided data. The vulnerability has a high severity rating based on its impact on confidentiality, integrity, and availability.