PT-2020-5875 · Linux+5 · Linux Kernel+5

Published 2020-09-11 · Updated 2022-05-03 · CVE-2020-36311

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.9

Description: The issue is related to the arch/x86/kvm/svm/sev.c component of the Kernel-based Virtual Machine (KVM) subsystem in the Linux kernel, which can lead to a denial of service (soft lockup) due to uncontrolled resource consumption. This can be triggered by destroying a large SEV VM, requiring the unregistering of many encrypted regions.

Recommendations: For versions prior to 5.9, update to version 5.9 or later to resolve the issue. As a temporary workaround, consider restricting the creation and destruction of large SEV VMs to minimize the risk of exploitation.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALT-PU-2020-3058

ALT-PU-2020-3211

ALT-PU-2020-3553

ALT-PU-2020-3570

ALT-PU-2021-1083

ALT-PU-2021-1105

ALT-PU-2021-1621

ALT-PU-2021-1656

ALT-PU-2021-1739

ALT-PU-2021-1862

ALT-PU-2021-1866

ALT-PU-2021-1870

ALT-PU-2021-2258

ALT-PU-2021-2737

ALT-PU-2021-2751

BDU:2021-01956

CVE-2020-36311

DLA-2714-1

DSA-4941-1

OESA-2021-1176

OPENSUSE-SU-2021:0579-1

OPENSUSE-SU-2021:0758-1

OPENSUSE-SU-2021:1975-1

OPENSUSE-SU-2021:1977-1

OPENSUSE-SU-2021_0579-1

OPENSUSE-SU-2021_0758-1

OPENSUSE-SU-2021_1975-1

OPENSUSE-SU-2021_1977-1

SUSE-SU-2021:1210-1

SUSE-SU-2021:1211-1

SUSE-SU-2021:1238-1

SUSE-SU-2021:1248-1

SUSE-SU-2021:1266-1

SUSE-SU-2021:1301-1

SUSE-SU-2021:1573-1

SUSE-SU-2021:1596-1

SUSE-SU-2021:1624-1

SUSE-SU-2021:1625-1

SUSE-SU-2021:1975-1

SUSE-SU-2021:1977-1

USN-5071-1

USN-5071-2

USN-5120-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 537

• https://ubuntu.com/security/notices/USN-5071-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-38199 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31916 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2021:1975-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-28688 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-23134 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2021:1625-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-31829 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-3483 · Security Note
• https://ubuntu.com/security/CVE-2021-40490 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-36311 · Security Note
• https://osv.dev/vulnerability/DLA-2714-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29264 · Security Note
• https://ubuntu.com/security/CVE-2021-3653 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47 · Vendor Advisory