A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl on 32-bit systems there might be some uninitialized portions of the kvm_debugregs structure that could be copied to userspace causing an information leak.

🗓️ 04 Apr 2023 07:00:00Reported by MicrosoftType

A flaw in kernel virtual machine leaks uninitialized kvm_debugregs data to userspace on 32-bit systems via get_debugregs.

Reporter	Title	Published	Views	Family All 275
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple kernel vulnerabilities	7 Jun 202415:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Storage Copy Data Management	27 Sep 202418:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Technical Suppport Appliance - possible security flaws or denial of service	26 Mar 202503:45	–	ibm
AlmaLinux	Moderate: kernel-rt security and bug fix update	22 May 202400:00	–	almalinux
AlmaLinux	Moderate: kernel security, bug fix, and enhancement update	22 May 202400:00	–	almalinux
AstraLinux	Astra Linux - уязвимость в linux-5.10, linux, linux-5.15	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the kvm_vcpu_ioctl_x86_getdebugregss() function (arch/x86/kvm/x86.c) in the KVM virtualization subsystem of the Linux operating system allows a attacker to gain access to protected information.	28 Mar 202300:00	–	bdu_fstec
CBLMariner	CVE-2023-1513 affecting package kernel 5.10.174.1-1	7 Apr 202304:59	–	cbl_mariner
CBLMariner	CVE-2023-1513 affecting package kernel for versions less than 5.15.102.1-3	16 Apr 202301:04	–	cbl_mariner
CNNVD	Linux KVM 安全漏洞	23 Mar 202300:00	–	cnnvd