CVE-2021-47062

A flaw was found in the Linux kernel's Kernel-based virtual machine KVM subsystem for AMD's Secure virtual machine SVM. The issue occurs when using the createdvcpus list to iterate over vCPUs instead of the onlinevcpus list, leading to a possible NULL pointer dereference. This vulnerability impac...

CVE-2021-47062 KVM: SVM: Use online_vcpus, not created_vcpus, to iterate over vCPUs

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use onlinevcpus, not createdvcpus, to iterate over vCPUs Use the kvmforeachvcpu helper to iterate over vCPUs when encrypting VMSAs for SEV, which effectively switches to use onlinevcpus instead of createdvcpus. This fix...