Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8596:08 advisory.

    * kernel: Reserved fields in guest message responses may not be zero initialized (CVE-2023-31346)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8543:07 advisory.

    kernel: Reserved fields in guest message responses may not be zero     initialized (CVE-2023-31346)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0321 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2023-31346:
    Failure to initialize     memory in SEV Firmware may allow a privileged attacker to access stale data     from other guests.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0439 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-31356:
    Incomplete system memory cleanup in SEV firmware could     allow a privileged attacker to corrupt guest private memory, potentially     resulting in a loss of data integrity.

    CVE-2023-31346:
    IOMMU improperly handles certain special address     ranges with invalid device table entries (DTEs), which may allow an attacker     with privileges and a compromised Hypervisor to     induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a     loss of guest integrity.

    CVE-2023-31315:
    Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access     to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.

    CVE-2023-20584:
    IOMMU improperly handles certain special address     ranges with invalid device table entries (DTEs), which may allow an attacker     with privileges and a compromised Hypervisor to     induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a     loss of guest integrity.

    CVE-2024-21978:
    Improper input validation in SEV-SNP could allow a malicious hypervisor to read or overwrite guest memory     potentially leading to data leakage or data corruption.

    CVE-2023-31355:
    Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a     guest's UMC seed potentially allowing reading of memory from a decommissioned guest.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0195 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-31346:
    Failure to initialize     memory in SEV Firmware may allow a privileged attacker to access stale data     from other guests.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:4262 advisory.

    * kernel: Reserved fields in guest message responses may not be zero initialized (CVE-2023-31346)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from     other guests. (CVE-2023-31346)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5883 advisory.

    The linux-firmware packages contain all of the firmware files that are required by various devices to     operate.

    Security Fix(es):

    * kernel: Reserved fields in guest message responses may not be zero initialized (AMD-     SN-3007,CVE-2023-31346)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:5640 advisory.

    The linux-firmware packages contain all of the firmware files that are required by various devices to     operate.

    Security Fix(es):

    * kernel: Reserved fields in guest message responses may not be zero initialized (CVE-2023-31346)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:4774 advisory.

    * kernel: Reserved fields in guest message responses may not be zero initialized (CVE-2023-31346)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4774 advisory.

    The linux-firmware packages contain all of the firmware files that are required by various devices to     operate.

    Security Fix(es):

    * kernel: Reserved fields in guest message responses may not be zero initialized (CVE-2023-31346)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4733 advisory.

    The linux-firmware packages contain all of the firmware files that are required by various devices to     operate.

    Security Fix(es):

    * kernel: Reserved fields in guest message responses may not be zero initialized (CVE-2023-31346)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4741 advisory.

    The linux-firmware packages contain all of the firmware files that are required by various devices to     operate.

    Security Fix(es):

    * kernel: Reserved fields in guest message responses may not be zero initialized (CVE-2023-31346)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4409 advisory.

    The linux-firmware packages contain all of the firmware files that are required by various devices to     operate.

    Security Fix(es):

    * kernel: Reserved fields in guest message responses may not be zero initialized (CVE-2023-31346)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4262 advisory.

    The linux-firmware packages contain all of the firmware files that are required by various devices to     operate.

    Security Fix(es):

    * kernel: Reserved fields in guest message responses may not be zero initialized (CVE-2023-31346)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
293463	MiracleLinux 9 : linux-firmware-20240603-143.1.el9_4 (AXSA:2024-8596:08)	Nessus	Miracle Linux Local Security Checks	medium
292710	MiracleLinux 8 : linux-firmware-20240610-122.git90df68d2.el8_10 (AXSA:2024-8543:07)	Nessus	Miracle Linux Local Security Checks	medium
239407	TencentOS Server 3: linux-firmware (TSSA-2024:0321)	Nessus	Tencent Local Security Checks	medium
238948	TencentOS Server 4: linux-firmware (TSSA-2024:0439)	Nessus	Tencent Local Security Checks	high
236180	Alibaba Cloud Linux 3 : 0195: linux-firmware (ALINUX3-SA-2024:0195)	Nessus	Alibaba Cloud Linux Local Security Checks	medium
235523	RockyLinux 8 : linux-firmware (RLSA-2024:4262)	Nessus	Rocky Linux Local Security Checks	medium
226418	Linux Distros Unpatched Vulnerability : CVE-2023-31346	Nessus	Misc.	medium
206229	RHEL 8 : linux-firmware (RHSA-2024:5883)	Nessus	Red Hat Local Security Checks	medium
205880	RHEL 9 : linux-firmware (RHSA-2024:5640)	Nessus	Red Hat Local Security Checks	medium
204720	AlmaLinux 9 : linux-firmware (ALSA-2024:4774)	Nessus	Alma Linux Local Security Checks	medium
203687	RHEL 9 : linux-firmware (RHSA-2024:4774)	Nessus	Red Hat Local Security Checks	medium
203685	RHEL 8 : linux-firmware (RHSA-2024:4733)	Nessus	Red Hat Local Security Checks	medium
203683	RHEL 8 : linux-firmware (RHSA-2024:4741)	Nessus	Red Hat Local Security Checks	medium
202010	RHEL 8 : linux-firmware (RHSA-2024:4409)	Nessus	Red Hat Local Security Checks	medium
201280	RHEL 8 : linux-firmware (RHSA-2024:4262)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2023-31346

medium

Tenable Plugins

medium

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium