Description
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() vgic_v2_parse_attr() is responsible for finding the vCPU that matches the user-provided CPUID, which (of course) may not be valid. If the ID is invalid, kvm_get_vcpu_by_id() returns NULL, which isn't handled gracefully. Similar to the GICv3 uaccess flow, check that kvm_get_vcpu_by_id() actually returns something and fail the ioctl if not.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
7d450e2821710718fd6703e9c486249cee913bab to < 4404465a1bee3607ad90a4c5f9e16dfd75b85728affected7d450e2821710718fd6703e9c486249cee913bab to < 17db92da8be5dd3bf63c01f4109fe47db64fc66faffected7d450e2821710718fd6703e9c486249cee913bab to < 3a5b0378ac6776c7c31b18e0f3c1389bd6005e80affected7d450e2821710718fd6703e9c486249cee913bab to < 8d6a1c8e3de36cb0f5e866f1a582b00939e23104affected7d450e2821710718fd6703e9c486249cee913bab to < 01981276d64e542c177b243f7c979fee855d5487affected7d450e2821710718fd6703e9c486249cee913bab to < 6ddb4f372fc63210034b903d96ebbeb3c7195adbaffected
Linux Linux
Default version status: affected
4.7affected0 to < 4.7unaffected5.10.217 to ≤ 5.10.*unaffected5.15.159 to ≤ 5.15.*unaffected6.1.91 to ≤ 6.1.*unaffected6.6.31 to ≤ 6.6.*unaffected6.8.10 to ≤ 6.8.*unaffected6.9 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4404465a1bee3607ad90a4c5f9e16dfd75b85728 ↗
- https://git.kernel.org/stable/c/17db92da8be5dd3bf63c01f4109fe47db64fc66f ↗
- https://git.kernel.org/stable/c/3a5b0378ac6776c7c31b18e0f3c1389bd6005e80 ↗
- https://git.kernel.org/stable/c/8d6a1c8e3de36cb0f5e866f1a582b00939e23104 ↗
- https://git.kernel.org/stable/c/01981276d64e542c177b243f7c979fee855d5487 ↗
- https://git.kernel.org/stable/c/6ddb4f372fc63210034b903d96ebbeb3c7195adb ↗
- https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html ↗