CVE-2020-36311: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers to cause a denial of service (soft lockup) by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions), aka CID-7be74942f184.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only
• Linux Linux Kernel: before 5.9.0 (fixed in 5.9.0)

Published 2021-04-07. Last modified 2026-10-08.