GSD-2022-1005605 KVM: Don't set Accessed/Dirty bits for ZERO_PAGE

KVM: Don't set Accessed/Dirty bits for ZEROPAGE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005593 KVM: s390: pv: leak the topmost page table when destroy fails

KVM: s390: pv: leak the topmost page table when destroy fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

GSD-2022-1005535 KVM: Unconditionally get a ref to /dev/kvm module when creating a VM

KVM: Unconditionally get a ref to /dev/kvm module when creating a VM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...

PT-2022-34177 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to the KVM x86 component, specifically with the LTR emulation. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux Kernel...

PT-2022-34325 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 3.17 through 5.4.210 Description: The issue is related to the KVM x86 component, specifically with the handling of the LTR emulation. The problem arises when marking the TSS busy during this emulation, potentially after...

PT-2022-33793 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.33 through v5.15.62 Description: The issue concerns the KVM module in the Linux Kernel, where a reference to the /dev/kvm module is unconditionally obtained when creating a VM. The actual impact and attack...

PT-2022-34180 · Linux · Kvm +1

Name of the Vulnerable Software and Affected Versions: KVM versions prior to v5.10.137 Linux Kernel versions 4.19 through 5.10.136 Description: The issue concerns a snapshot pre-VM-Enter BNDCFGS for the !nested run pending case in KVM's nVMX. The actual impact and attack plausibility have not yet...

PT-2022-34179 · Linux · Kvm +1

Name of the Vulnerable Software and Affected Versions: KVM versions prior to v5.10.137 Linux Kernel versions prior to v5.10.137 Description: The issue concerns a snapshot pre-VM-Enter DEBUGCTL for the !nested run pending case in KVM's nVMX. The actual impact and attack plausibility have not yet...

PT-2022-34328 · Linux · Kvm +1

Name of the Vulnerable Software and Affected Versions: KVM versions prior to v5.4.211 Description: The issue concerns the nVMX snapshot pre-VM-Enter BNDCFGS for the !nested run pending case. It was introduced in Linux Kernel version v4.19 and is fixed in version v5.4.211. The actual impact and...

GSD-2022-1005381 KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case

KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005380 KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case

KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nestedrunpending case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005379 KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0

KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005378 KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks

KVM: x86: Mark TSS busy during LTR emulation after all fault checks This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005377 KVM: x86/xen: Stop Xen timer before changing IRQ

KVM: x86/xen: Stop Xen timer before changing IRQ This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005376 KVM: x86/xen: Initialize Xen timer only once

KVM: x86/xen: Initialize Xen timer only once This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005371 KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT

KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005259 KVM: Don't set Accessed/Dirty bits for ZERO_PAGE

KVM: Don't set Accessed/Dirty bits for ZEROPAGE This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005245 KVM: s390: pv: leak the topmost page table when destroy fails

KVM: s390: pv: leak the topmost page table when destroy fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

GSD-2022-1005170 KVM: Unconditionally get a ref to /dev/kvm module when creating a VM

KVM: Unconditionally get a ref to /dev/kvm module when creating a VM This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.4 by commit...

USN-5616-1 linux-intel-iotg vulnerabilities

Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. CVE-2021-33061 Moshe Kol, Amit Klein and Yossi Gilad discovered that the I...