Add support for SEV-SNP
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux-gcp (Ubuntu) |
New
|
Undecided
|
Unassigned | ||
Jammy |
Fix Released
|
Critical
|
Khaled El Mously |
Bug Description
Version 3 of AMD's Secure Encrypted Virtualization is called SNP (Secure Nested Pages). Support for this has been added to the kernel, mostly in v5.19 with some prerequisites from v5.16. This feature is requested to be backported to Jammy (5.15).
More information at https:/
[Impact]
No support for SEV-SNP on AMD EPYC2 CPUs currently
[Fix]
Add SEV-SNP support patches.
[Test]
Extensive testing by the cloud team over several months, testing general functionality under SEV-SNP.
[Regression Potential]
This was never working so there should be no risk of regression for SEV-SNP.As it does change those files it can have an effect on existing SEV functionality in case of a bug. The code is limited so no regression outside of SEV is expected.
CVE References
no longer affects: | linux-aws (Ubuntu) |
description: | updated |
description: | updated |
description: | updated |
Changed in linux-gcp (Ubuntu Jammy): | |
assignee: | nobody → Khaled El Mously (kmously) |
importance: | Undecided → Critical |
status: | New → Fix Committed |
This bug is awaiting verification that the linux-gcp/ 5.15.0- 1028.35 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification- needed- jammy' to 'verification- done-jammy' . If the problem still exists, change the tag 'verification- needed- jammy' to 'verification- failed- jammy'.
If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.
See https:/ /wiki.ubuntu. com/Testing/ EnableProposed for documentation how to enable and use -proposed. Thank you!