Loading vulnerability…
CVE-2023-46813 is a race-condition vulnerability in the Linux kernel's AMD Secure Encrypted Virtualization–Encrypted State (SEV-ES) #VC handler and emulation of memory-mapped I/O accesses. In kernels before 6.5.9, incorrect access checking permits a userspace process to replace an instruction after it is validated but before the #VC handler reads and emulates it. In an SEV-ES guest where userspace can access MMIO registers, this race can be used to obtain an arbitrary kernel-memory write.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
1 valid exploit after Mallory filtered fakes, detection scripts, and README-only repos.
This repository is a Proof-of-Concept (PoC) exploit for CVE-2023-46813, targeting SEV-SNP VMs running under a patched Linux KVM host and QEMU. The repository contains 7 files, including Rust source code (src/main.rs), two patch files for the Linux kernel and QEMU (host-patches/), and standard Rust project files (Cargo.toml, Cargo.lock). The exploit works by: 1. Applying the provided patches to both the Linux host kernel and QEMU, which introduce a new KVM_ATTACK ioctl and a corresponding 'attack' command in QEMU. 2. Running a SEV-SNP VM under this patched environment. 3. Executing the Rust exploit code inside the VM, which allocates a large memory region and waits for the hypervisor to change its type to MMIO (triggered by the 'attack' command in QEMU). 4. Once MMIO is detected (via a SIGBUS signal), the exploit leverages the vulnerability to swap its process credentials with those of the 'init' process, effectively escalating privileges to root inside the VM. The exploit does not rely on absolute kernel offsets but uses relative offsets within the Linux task_struct. The main entry point is src/main.rs. The exploit is a PoC and requires a custom, patched environment to function. No network endpoints are present; all actions are local to the VM and host. The main fingerprintable endpoints are the patch files and the main Rust source file.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
13 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Linux kernel Secure Encrypted Virtualization–Encrypted State local privilege-escalation vulnerability.
Local privilege-escalation vulnerability related to Linux kernel support for AMD SEV-ES.
Linux kernel SEV-ES local privilege-escalation flaw.
Linux kernel SEV-ES local privilege-escalation vulnerability.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.