GSD-2022-1002869 KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak

KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.2 by commit...

PT-2022-31449

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.17.12 Description The issue concerns the use of try cmpxchg user to update guest PTE A/D bits in KVM x86. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-31920

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.120 Description The issue is related to the KVM x86 emulator. It was introduced in version v5.10.61 and fixed in version v5.10.120. The actual impact and attack plausibility have not yet been proven...

PT-2022-31132

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.2 Description The issue is related to a potential kernel data leak in the KVM: SVM: sev ioctl interfaces. It was introduced in version v5.7 and fixed in Linux Kernel version v5.18.2. The actual impact and...

PT-2022-31720

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.45 Description The issue is related to the x86 emulator in KVM, where it could be called without a decoded instruction. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

PT-2022-31715

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.45 Description The issue is related to a potential kernel data leak in the KVM: SVM: sev ioctl interfaces. It was introduced in version v5.7 and is fixed in Linux Kernel version v5.15.45. The actual impact...

PT-2022-31134

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.2 Description The issue concerns the x86/fpu in KVM, where the base guest FPU uABI size is set. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-31445

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.13 Description The issue is related to the KVM x86 emulator. It avoids calling the x86 emulator without a decoded instruction. The actual impact and attack plausibility have not yet been proven...

PT-2022-31141

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.2 Description The issue concerns the use of try cmpxchg user to update guest PTE A/D bits in KVM x86. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31446

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.13 Description The issue concerns the x86/fpu in KVM, where the base guest FPU uABI size is set to sizeofstruct kvm xsave. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2022-31138

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.2 Description The issue is related to the KVM x86 emulator. It was introduced in version v5.12 and fixed in version v5.18.2. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-31438

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.13 Description The issue is related to KVM x86 and involves dropping warnings that assert a triple fault never escapes from L2. The actual impact and attack plausibility have not yet been proven...

[SECURITY] Fedora 36 Update: qemu-6.2.0-12.fc36

qemu is an open source virtualizer that provides hardware emulation for the KVM hypervisor. qemu acts as a virtual machine monitor together with the KVM kernel modules, and emulates the hardware for a full system such as a PC and its associated peripherals...

CVE-2022-2153

A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a...

USN-5485-1: Linux kernel vulnerabilities

It was discovered that some Intel processors did not completely perform cleanup actions on multi-core shared buffers. A local attacker could possibly use this to expose sensitive information. CVE-2022-21123 It was discovered that some Intel processors did not completely perform cleanup actions on...

CVE-2022-1158

A flaw was found in KVM. When updating a guest's page table entry, vmpgoff was improperly used as the offset to get the page's pfn. As vaddr and vmpgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the userspace region and...

Unbreakable Enterprise kernel security update

5.4.17-2136.308.9 - x86/speculation/mmio: Fix late microcode loading Patrick Colp Orabug: 34276099 5.4.17-2136.308.8 - Add debugfs for controlling MMIO state data Kanth Ghatraju Orabug: 34202259 CVE-2022-21123 CVE-2022-21127 CVE-2022-21125 CVE-2022-21166 - KVM: x86/speculation: Disable Fill buffe...

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.46 and fixes at least the following security issues: KVM: x86: avoid calling x86 emulator without a decoded instruction CVE-2022-1852. A use-after-free vulnerability was found in the Linux kernel's Netfilter subsystem in net/netfilter/nftablesapi.c. Th...

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.46 and fixes at least the following security issues: KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID CVE-2022-1789. KVM: x86: avoid calling x86 emulator without a decoded instruction CVE-2022-1852. A use-after-free vulnerability was...

Moderate: Red Hat Security Advisory: virt:av and virt-devel:av security and bug fix update

An update for the virt:av and virt-devel:av modules is now available for Red Hat Enterprise Linux Advanced Virtualization 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, whi...