WeSee: Using Malicious #VC Interrupts to Break AMD SEV-SNP
<|reference_start|>WeSee: Using Malicious #VC Interrupts to Break AMD SEV-SNP: AMD SEV-SNP offers VM-level trusted execution environments (TEEs) to protect the confidentiality and integrity for sensitive cloud workloads from untrusted hypervisor controlled by the cloud provider. AMD introduced a new exception, #VC, to facilitate the communication between the VM and the untrusted hypervisor. We present WeSee attack, where the hypervisor injects malicious #VC into a victim VM's CPU to compromise the security guarantees of AMD SEV-SNP. Specifically, WeSee injects interrupt number 29, which delivers a #VC exception to the VM who then executes the corresponding handler that performs data and register copies between the VM and the hypervisor. WeSee shows that using well-crafted #VC injections, the attacker can induce arbitrary behavior in the VM. Our case-studies demonstrate that WeSee can leak sensitive VM information (kTLS keys for NGINX), corrupt kernel data (firewall rules), and inject arbitrary code (launch a root shell from the kernel space).<|reference_end|>
@article{schlüter2024wesee:,
    title={WeSee: Using Malicious #VC Interrupts to Break AMD SEV-SNP},
    author={Benedict Schl"uter, Supraja Sridhara, Andrin Bertschi, Shweta Shinde},
    journal={arXiv preprint arXiv:2404.03526},
    year={2024},
    archivePrefix={arXiv},
    eprint={2404.03526},
    primaryClass={cs.CR}
}