EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·Aug 12·5 min read
I found a KVM guest-to-host heap corruption bug and someone else got there first
TL;DR
A heap corruption vulnerability was discovered in KVM's SEV-SNP Page State Change handler, allowing malicious guest VMs to corrupt host memory. The issue was reported and patched, highlighting the importance of collaborative security efforts.
✦ Why It Matters
Review your systems for similar vulnerabilities and ensure timely patching of known issues.
Key Takeaways
- Implement strict input validation for guest-provided buffers.
- Learn from peer reports to improve vulnerability handling.
- Understand the implications of VM escape vulnerabilities.
- Regularly review and test hypervisor code for security flaws.
How It Works
The vulnerability occurs when a guest VM provides a buffer size that the host does not validate against the actual allocated size. This allows the guest to specify a small buffer while requesting the host to process a larger number of entries, leading to out-of-bounds memory access.