Description
A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic msrs when the guest resets its apic, potentially leading to a denial of service condition.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Red Hat Enterprise Linux 8
Default version status: affected
0:4.18.0-553.8.1.rt7.349.el8_10 to < *unaffected
Red Hat Red Hat Enterprise Linux 8
Default version status: affected
0:4.18.0-553.8.1.el8_10 to < *unaffected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
0:5.14.0-427.16.1.el9_4 to < *unaffected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
0:5.14.0-427.16.1.el9_4 to < *unaffected
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support
Default version status: affected
0:5.14.0-284.69.1.el9_2 to < *unaffected
Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support
Default version status: affected
0:5.14.0-284.69.1.rt14.354.el9_2 to < *unaffected
Red Hat Red Hat Enterprise Linux 6
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 7
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 7
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
References
- https://access.redhat.com/errata/RHSA-2024:2758 ↗
- https://access.redhat.com/errata/RHSA-2024:3854 ↗
- https://access.redhat.com/errata/RHSA-2024:3855 ↗
- https://access.redhat.com/errata/RHSA-2024:4211 ↗
- https://access.redhat.com/errata/RHSA-2024:4352 ↗
- https://access.redhat.com/security/cve/CVE-2023-5090 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2248122 ↗