A critical vulnerability in the Linux kernel KVM SEV subsystem allows for potential system compromise due to improper buffer validation during Page State Change requests.

This flaw occurs within the KVM SEV (Secure Encrypted Virtualization) component during the processing of Page State Change requests. By failing to properly validate indices against the actual size of the GHCB shared buffer, the kernel may process out of bounds memory, which can be triggered by a local attacker without requiring specific privileges.

The CVSS score of 9.3 reflects the critical nature of this vulnerability, as it permits a local attacker to achieve potential code execution or system escalation with high impact to confidentiality, integrity, and availability. Successful exploitation could lead to full guest to host breakout or complete compromise of the virtualized environment, posing a severe risk to multi tenant infrastructure and sensitive data hosted on affected Linux systems.

Immediate Action: Update the Linux kernel to version 6.12.93, 6.18.35, 7.0.12, or the latest stable release provided by your distribution vendor.

Proactive Monitoring: Monitor kernel logs for recurring KVM related crashes or unauthorized memory access violations that may indicate exploitation attempts.

Compensating Controls: Restrict access to the hypervisor and ensure that only trusted virtual machines are permitted to utilize SEV features until patches are applied.

Public Exploit Available: No (exploit_available unknown).

Given the critical CVSS severity and the potential for a virtual machine breakout, immediate patching of the Linux kernel is essential. Administrators should prioritize updating systems that utilize SEV functionality, as these environments are specifically exposed to this Page State Change buffer validation error.