CVE-2020-36311: Medium severity Linux Linux kernel vulnerability
An issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers to cause a denial of service (soft lockup) by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions), aka CID-7be74942f184.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 5.9
Event History
Frequently Asked Questions
What is the severity of CVE-2020-36311?
CVE-2020-36311 has a medium severity rating, as it can lead to a denial of service via a soft lockup.
How do I fix CVE-2020-36311?
To fix CVE-2020-36311, upgrade your Linux kernel to version 5.10.223-1 or later, or to version 6.1.119-1 or later.
Which versions of Linux kernel are affected by CVE-2020-36311?
CVE-2020-36311 affects Linux kernel versions before 5.9.0.
Is Debian affected by CVE-2020-36311?
Yes, Debian GNU/Linux versions 9.0 and 10.0 are affected by CVE-2020-36311.
What is the impact of CVE-2020-36311 on SEV VMs?
The impact of CVE-2020-36311 is a denial of service that can be triggered during the destruction of large SEV VMs.