USN-8888-1: Linux kernel vulnerabilities for Azure

Advisory USN-8888-1, from the Ubuntu Security feed, states that the update fixes several vulnerabilities in the Linux kernel for Azure variants. The text highlights CVE-2023-20585: some AMD processors did not correctly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. According to the advisory, a local attacker with access to the hypervisor could possibly use this issue to trigger an out-of-bounds condition and compromise the memory integrity of SEV-SNP guests. Beyond this point, the advisory lists fixes across dozens of subsystems, such as ARM64, x86 and RISC-V architectures, network drivers, GPU, TPM, PCI, IOMMU and Bluetooth. The original text says an attacker could possibly use these problems to compromise the system. The source declares itself a machine translation of feed content, so details should be checked against the official advisory, found by its number USN-8888-1 on the Ubuntu Security portal.