kernel: Linux kernel KVM: Denial of Service in nested SVM due to TSC multiplier manipulation

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM nested SVM nSVM module. A local attacker with low privileges in a nested virtual machine can manipulate the Timestamp Counter TSC multiplier and CPUID features. This manipulation can trigger a kernel warning, leading to a...

Kernel: kvm: OOB memory write via kvm_dev_ioctl_get_cpuid

An out-of-bounds memory write issue was found in the way the Linux kernel's KVM hypervisor handled the 'KVMGETEMULATEDCPUID' ioctl2 request to get CPUID features emulated by the KVM hypervisor. A user or process able to access the '/dev/kvm' device could use this flaw to crash the system, resulti...