In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs Use the kvm_for_each_vcpu() helper to iterate over vCPUs when encrypting VMSAs for SEV, which effectively switches to use online_vcpus instead of created_vcpus. This fixes a possible null-pointer dereference as created_vcpus does not guarantee a vCPU exists, since it is updated at the very beginning of KVM_CREATE_VCPU. created_vcpus exists to allow the bulk of vCPU creation to run in parallel, while still correctly restricting the max number of max vCPUs.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | linux | < 6.1.94-1 | linux_6.1.94-1_all.deb |
Debian | 11 | all | linux | < 5.10.218-1 | linux_5.10.218-1_all.deb |
Debian | 999 | all | linux | < 6.9.7-1 | linux_6.9.7-1_all.deb |
Debian | 13 | all | linux | < 6.8.12-1 | linux_6.8.12-1_all.deb |