PT-2022-29395

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.2 through v5.17.1 Description The issue is related to the KVM x86/mmu component, specifically involving a compare-and-exchange of gPTE via the user address. The actual impact and attack plausibility have not yet been...

PT-2022-29409

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.13 through v5.17.1 Description A potential security issue exists in the KVM x86/mmu component related to the TDP MMU, where not all roots are zapped when unmapping a gfn range. The actual impact and attack plausibility...

PT-2022-30597

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue concerns the KVM x86/svm component, specifically with clearing reserved bits written to PerfEvtSeln MSRs. The actual impact and attack plausibility have not yet been proven...

PT-2022-30016

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue concerns the KVM x86/svm, where reserved bits written to PerfEvtSeln MSRs are not properly cleared. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-29364

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue concerns the KVM x86/svm component, where reserved bits written to PerfEvtSeln MSRs are not properly cleared. This is an automated ID intended to aid in discovery of potential securi...

PT-2022-30051

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential security issue exists in the KVM x86/mmu component related to the TDP MMU, where not all roots are zapped when unmapping a GFN range. The actual impact and attack plausibility hav...

PT-2022-29609

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to a potential NULL pointer dereference in kvm dirty ring push. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-29266

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to a potential NULL pointer dereference in kvm dirty ring push. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-30037

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential security issue exists in KVM: SVM, which could lead to a panic on out-of-bounds guest IRQ. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30307

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential issue in KVM: SVM may cause a panic on out-of-bounds guest IRQ. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-29731

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A potential security issue exists in the KVM x86/mmu component related to the TDP MMU, where not all roots are zapped when unmapping a GFN range. The actual impact and attack plausibility hav...

PT-2022-29721

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to the KVM x86/mmu component, specifically concerning the comparison and exchange of gPTE via the user address. The actual impact and potential for attack have not been...

PT-2022-30755

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue concerns the KVM x86/svm component, specifically with clearing reserved bits written to PerfEvtSeln MSRs. The actual impact and attack plausibility have not yet been proven...

PT-2022-29693

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue concerns the KVM x86/svm, where reserved bits written to PerfEvtSeln MSRs are not properly cleared. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-29941

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to a potential NULL pointer dereference in kvm dirty ring push. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30684

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue concerns the KVM x86/svm, where reserved bits written to PerfEvtSeln MSRs are not properly cleared. This is an automated ID intended to aid in the discovery of potential security...

PT-2022-29390

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential issue in the kvm irq delivery to apic fast function may lead to a theoretical NULL pointer dereference. The actual impact and attack plausibility have not yet been proven...

PT-2022-30038

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A potential issue exists in the kvm irq delivery to apic fast function, which may lead to a theoretical NULL pointer dereference. The actual impact and attack plausibility have not yet been...

PT-2022-29716

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A potential issue exists in the kvm irq delivery to apic fast function, which may lead to a theoretical NULL pointer dereference. The actual impact and attack plausibility have not yet been...

PT-2022-30484

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to the KVM x86/mmu component, specifically with the comparison and exchange of gPTE via the user address. The actual impact and attack plausibility have not yet been...