GSD-2022-1001765 KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()

KVM: x86: Avoid theoretical NULL pointer dereference in kvmirqdeliverytoapicfast This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by...

GSD-2022-1001764 KVM: SVM: fix panic on out-of-bounds guest IRQ

KVM: SVM: fix panic on out-of-bounds guest IRQ This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001743 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

GSD-2022-1001668 KVM: avoid NULL pointer dereference in kvm_dirty_ring_push

KVM: avoid NULL pointer dereference in kvmdirtyringpush This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

GSD-2022-1001458 KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU

KVM: x86/mmu: Zap all roots when unmapping gfn range in TDP MMU This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001448 KVM: x86/mmu: do compare-and-exchange of gPTE via the user address

KVM: x86/mmu: do compare-and-exchange of gPTE via the user address This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001443 KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()

KVM: x86: Avoid theoretical NULL pointer dereference in kvmirqdeliverytoapicfast This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by...

GSD-2022-1001439 KVM: SVM: fix panic on out-of-bounds guest IRQ

KVM: SVM: fix panic on out-of-bounds guest IRQ This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001420 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

GSD-2022-1001336 KVM: avoid NULL pointer dereference in kvm_dirty_ring_push

KVM: avoid NULL pointer dereference in kvmdirtyringpush This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

GSD-2022-1001136 KVM: x86/mmu: Zap _all_ roots when unmapping gfn range in TDP MMU

KVM: x86/mmu: Zap all roots when unmapping gfn range in TDP MMU This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001122 KVM: x86/mmu: do compare-and-exchange of gPTE via the user address

KVM: x86/mmu: do compare-and-exchange of gPTE via the user address This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001117 KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()

KVM: x86: Avoid theoretical NULL pointer dereference in kvmirqdeliverytoapicfast This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by comm...

GSD-2022-1001115 KVM: SVM: fix panic on out-of-bounds guest IRQ

KVM: SVM: fix panic on out-of-bounds guest IRQ This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001091 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

GSD-2022-1000993 KVM: avoid NULL pointer dereference in kvm_dirty_ring_push

KVM: avoid NULL pointer dereference in kvmdirtyringpush This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

PT-2022-30042

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to the KVM x86/mmu, where a compare-and-exchange of gPTE is performed via the user address. The actual impact and attack plausibility have not yet been proven...

PT-2022-29388

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential security issue exists in KVM: SVM, which could lead to a panic on out-of-bounds guest IRQ. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29712

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A potential security issue in KVM: SVM may cause a panic on out-of-bounds guest IRQ. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30310

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to the KVM x86/mmu component, specifically with the comparison and exchange of gPTE via the user address. The actual impact and attack plausibility have not yet been...