Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2022-49883

KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format On 64 bit host, if the guest doesn't have X86_FEATURE_LM, KVM will access 16 gprs to 32-bit smram image, causing out-ouf-bound ram access. On 32 bit host, the rsm_load_state_64/enter_smm_save_state_64 is compiled out, thus access overflow can't happen.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • b443183a25ab61840a12de92f8822849e017b9c8 to < a7ebfbea0f52550d7cdf12c38f3f5eaa7b2b6494affected
  • b443183a25ab61840a12de92f8822849e017b9c8 to < 696db303e54f7352623d9f640e6c51d8fa9d5588affected

Linux Linux

Default version status: affected

  • 6.0affected
  • 0 to < 6.0unaffected
  • 6.0.8 to ≤ 6.0.*unaffected
  • 6.1 to ≤ *unaffected

References