CVE-2023-53319

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle kvmarminit failure correctly in finalizepkvm Currently there is no synchronisation between finalizepkvm and kvmarminit initcalls. The finalizepkvm proceeds happily even if kvmarminit fails resulting in the...

DEBIAN-CVE-2023-53319

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle kvmarminit failure correctly in finalizepkvm Currently there is no synchronisation between finalizepkvm and kvmarminit initcalls. The finalizepkvm proceeds happily even if kvmarminit fails resulting in the...

UBUNTU-CVE-2023-53319

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle kvmarminit failure correctly in finalizepkvm Currently there is no synchronisation between finalizepkvm and kvmarminit initcalls. The finalizepkvm proceeds happily even if kvmarminit fails resulting in the...

CVE-2023-53319

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle kvmarminit failure correctly in finalizepkvm Currently there is no synchronisation between finalizepkvm and kvmarminit initcalls. The finalizepkvm proceeds happily even if kvmarminit fails resulting in the...

CVE-2023-53319 KVM: arm64: Handle kvm_arm_init failure correctly in finalize_pkvm

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle kvmarminit failure correctly in finalizepkvm Currently there is no synchronisation between finalizepkvm and kvmarminit initcalls. The finalizepkvm proceeds happily even if kvmarminit fails resulting in the...

CVE-2023-53319

CVE-2023-53319 (Linux kernel, KVM arm64) : The issue arises from a race between finalize_pkvm() and kvm_arm_init() initcalls, where finalize_pkvm() proceeds even if kvm_arm_init() fails, causing warnings and a potential HYP panic. The connected Astra/SUSE OSV entries confirm this vulnerability in...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a lack of synchronization mechanism between finalizepkvm and kvmarminit, which could lead to HYP mode...

PT-2025-38037

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0 237 Description A synchronization issue existed between finalize pkvm and kvm arm init initcalls in the Linux kernel. Specifically, finalize pkvm would proceed even if kvm arm init failed, leading to a...

PT-2025-48934

Уязвимость технологии виртуализации pKVM protected Kernel-based Virtual Machine ядра операционных систем Android связана с ошибками синхронизации при использовании общего ресурса «Ситуация гонки» при добавлении страниц в кэш памяти. Эксплуатация уязвимости может позволить нарушителю повысить свои...

PT-2025-48937

Уязвимость технология виртуализации pKVM protected Kernel-based Virtual Machine ядра операционных систем Android связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

Linux ARM64 KVM Heap Buffer Overflow DoS

The vulnerability of the kvmhypreserve function in the arch/arm64/kvm/pkvm.c module of the virtualization subsystem on the ARM 64-bit kernel of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause...

kernel: Linux kernel KVM: Denial of Service due to incorrect kvm_arm_init failure handling in finalize_pkvm

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for arm64 architectures. This vulnerability arises from a lack of synchronization between the finalizepkvm and kvmarminit initialization calls. A local attacker with low privileges could exploit this by triggering a scenario...

GSD-2022-1004474 KVM: arm64: Prevent kmemleak from accessing pKVM memory

KVM: arm64: Prevent kmemleak from accessing pKVM memory This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit...

PT-2022-32736

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.51 Description The issue concerns the KVM on arm64, where kmemleak could access pKVM memory. This is an automated ID to aid in the discovery of potential security vulnerabilities, and the actual impact and...

PT-2022-32534

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.8 Description The issue concerns the KVM on arm64, where kmemleak could access pKVM memory. This is a potential security issue, although its actual impact and attack plausibility have not been proven yet...

PT-2022-28899

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.5 Description The issue concerns the use of mm ops indirection for cache maintenance in the KVM arm64 pkvm. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

GSD-2022-1000260 KVM: arm64: pkvm: Use the mm_ops indirection for cache maintenance

KVM: arm64: pkvm: Use the mmops indirection for cache maintenance This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.19 by commit...

PT-2022-28538

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.19 Description The issue concerns the use of mm ops indirection for cache maintenance in the KVM arm64 pkvm. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...