Linux Kernel KVM SEV Port I/O Request Length Zero Vulnerability

A vulnerability in the Linux kernel's KVM (Kernel-based Virtual Machine) SEV (Secure Encrypted Virtualization) module has been addressed. This vulnerability involved Port I/O requests with a length of zero, which could cause issues when setting up the software scratch area. The kernel now explicitly ignores such requests, preventing potential underflows and allowing for warnings when the scratch area is configured with a length of zero.

Impact

The vulnerability could lead to improper handling of Port I/O requests, potentially causing underflows that disrupt the configuration of the software scratch area.

Reproduction

The vulnerability can be reproduced by sending Port I/O requests with a length of zero to the KVM SEV module. This can be done by configuring a virtual machine to use SEV and then issuing I/O requests that intentionally have a zero length. The kernel's previous handling of these requests could lead to underflows, which are now prevented by the patch.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. The patch is included in the official Linux stable releases.