It was discovered that some AMD processors did not properly perform Reverse
Map Table (RMP) checks when the IOMMU accessed certain host buffers. A
local attacker with hypervisor access could possibly use this to trigger an
out-of-bounds condition and compromise the integrity of SEV-SNP guest
memory. (CVE-2023-20585)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- NVDIMM (Non-Volatile Memory Device) drivers;
- Handshake API;
- ARM32 architecture;
- MIPS architecture;
- OpenRISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- x86 architecture;
- Cryptographic API;
- Compute Acceleration Framework;
- Intel NPU Driver;
- ACPI drivers;
- Android drivers;
- Serial ATA and Parallel ATA drivers;
- Drivers core;
- Rados block device (RBD) driver;
- Ublk userspace block driver;
- Bluetooth drivers;
- Cdrom driver;
- Character device driver;
- TPM device driver;
- Data acquisition framework and drivers;
- Hardware crypto device drivers;
- CXL (Compute Express Link) drivers;
- DAX dirext access to differentiated memory framework;
- DIBS (Direct Internal Buffer Sharing) drivers;
- Buffer Sharing and Synchronization framework;
- DMA engine subsystem;
- DPLL subsystem;
- EDAC drivers;
- FireWire subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- ARM SCMI message protocol;
- Intel Stratix 10 firmware drivers;
- FPGA Framework;
- GPIB drivers;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Microsoft Hyper-V drivers;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- Intel Trace Hub HW tracing drivers;
- I2C subsystem;
- I3C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- IIO Magnetometer sensors drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;...