netdev - RE: Security issue with vmxnet3 and e100 for AMD SEV(-SNP) / Intel TDX

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <719473c603774460970f93d926530b87@intel.com>
Date:   Mon, 11 Jan 2021 17:24:02 +0000
From:   "Kleen, Andi" <andi.kleen@...el.com>
To:     Robert Buhren <robert.buhren@...t.tu-berlin.de>,
        "Kirill A. Shutemov" <kirill.shutemov@...ux.intel.com>,
        "Radev, Martin" <martin.radev@...ec.fraunhofer.de>
CC:     "netdev@...r.kernel.org" <netdev@...r.kernel.org>,
        "intel-wired-lan@...ts.osuosl.org" <intel-wired-lan@...ts.osuosl.org>,
        "doshir@...are.com" <doshir@...are.com>,
        "Brandeburg, Jesse" <jesse.brandeburg@...el.com>,
        "Nguyen, Anthony L" <anthony.l.nguyen@...el.com>,
        "Morbitzer, Mathias" <mathias.morbitzer@...ec.fraunhofer.de>,
        "file@...t.tu-berlin.de" <file@...t.tu-berlin.de>,
        "Banse, Christian" <christian.banse@...ec.fraunhofer.de>,
        "brijesh.singh@....com" <brijesh.singh@....com>,
        "Thomas.Lendacky@....com" <Thomas.Lendacky@....com>,
        "pv-drivers@...are.com" <pv-drivers@...are.com>,
        "martin.b.radev@...il.com" <martin.b.radev@...il.com>,
        "sathyanarayanan.kuppuswamy@...ux.intel.com" 
        <sathyanarayanan.kuppuswamy@...ux.intel.com>
Subject: RE: Security issue with vmxnet3 and e100 for AMD SEV(-SNP) / Intel
 TDX

>Let us know if you are interested in our fuzzing/static analysis setup.
>We're planning to submit a paper soon and we will publish the source >code along with the paper.

We already have an own static analysis/fuzzing frame work, but it's not released yet.

-Andi