Lucene search

K
osvGoogleOSV:CVE-2024-46707
HistorySep 13, 2024 - 7:15 a.m.

CVE-2024-46707

2024-09-1307:15:05
Google
osv.dev
linux kernel
vulnerability
guest gic configuration

AI Score

6.8

Confidence

High

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Make ICC_SGI_EL1 undef in the absence of a vGICv3

On a system with a GICv3, if a guest hasn’t been configured with
GICv3 and that the host is not capable of GICv2 emulation,
a write to any of the ICC_SGI_EL1 registers is trapped to EL2.

We therefore try to emulate the SGI access, only to hit a NULL
pointer as no private interrupt is allocated (no GIC, remember?).

The obvious fix is to give the guest what it deserves, in the
shape of a UNDEF exception.

AI Score

6.8

Confidence

High

Related for OSV:CVE-2024-46707