UVI-2021-1000874 kvm: avoid speculation-based attacks from out-of-range memslot accesses

kvm: avoid speculation-based attacks from out-of-range memslot accesses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.195 by commit...

UVI-2021-1000857 kvm: avoid speculation-based attacks from out-of-range memslot accesses

kvm: avoid speculation-based attacks from out-of-range memslot accesses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.237 by commit...

GSD-2021-1000857 kvm: avoid speculation-based attacks from out-of-range memslot accesses

kvm: avoid speculation-based attacks from out-of-range memslot accesses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.237 by commit...

GSD-2021-1000843 kvm: avoid speculation-based attacks from out-of-range memslot accesses

kvm: avoid speculation-based attacks from out-of-range memslot accesses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.273 by commit...

UVI-2021-1000843 kvm: avoid speculation-based attacks from out-of-range memslot accesses

kvm: avoid speculation-based attacks from out-of-range memslot accesses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.273 by commit...

GSD-2021-1000831 kvm: avoid speculation-based attacks from out-of-range memslot accesses

kvm: avoid speculation-based attacks from out-of-range memslot accesses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.273 by commit...

UVI-2021-1000831 kvm: avoid speculation-based attacks from out-of-range memslot accesses

kvm: avoid speculation-based attacks from out-of-range memslot accesses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.273 by commit...

PT-2021-29378

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.128 Description The issue concerns the KVM LAPIC, where a guard was not properly restored, potentially allowing illegal APIC register access. The actual impact and attack plausibility have not yet been prove...

PT-2021-29308

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.273 Description The issue concerns speculation-based attacks from out-of-range memslot accesses in kvm. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-25420

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: The issue concerns speculation-based attacks from out-of-range memslot accesses in kvm. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-29462

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.46 Description The issue concerns the KVM x86 component, specifically the handling of the MMU context when the SMM flag is cleared. The actual impact and potential for attack have not been proven yet...

PT-2021-25444

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.46 Description: The issue concerns illegal APIC register access in the LAPIC component of the KVM. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-25551

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.13 Description: A slab cache leak was discovered in the x86 emulator of KVM. The issue was introduced in version v5.7 and is fixed in Linux Kernel version v5.12.13. The actual impact and attack plausibilit...

PT-2021-29428

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.44 Description The issue concerns the liveliness of nested VM-Enter fail tracepoint messages in KVM on x86 systems. It was introduced in version v5.4 and fixed in version v5.10.44. The actual impact and...

PT-2021-29368

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.126 Description The issue concerns the liveliness of nested VM-Enter fail tracepoint messages in KVM on x86 systems. It was introduced in Linux Kernel version v5.4 and fixed in version v5.4.126. The actual...

PT-2021-25434

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.44 Description: The issue concerns the liveliness of nested VM-Enter fail tracepoint messages in KVM x86. It was introduced in version v5.4 and fixed in version v5.10.44. The actual impact and attack...

PT-2021-25374

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.126 Description: The issue concerns the liveliness of nested VM-Enter fail tracepoint messages in KVM on x86 systems. It was introduced in version v5.4 and fixed in version v5.4.126. The actual impact and...

PT-2021-29545

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.13 Description A slab cache leak was discovered in the x86 emulator of KVM. The issue was introduced in version v5.7 and is fixed in Linux Kernel version v5.12.13. The actual impact and attack plausibility...

PT-2021-25365

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.126 Description: The issue concerns speculation-based attacks from out-of-range memslot accesses in kvm. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2021-25470

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.46 Description: A slab cache leak was discovered in the x86 emulator of KVM. The issue was introduced in version v5.7 and is fixed in Linux Kernel version v5.10.46. The actual impact and attack plausibilit...