Description
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish Lock all vCPUs when synchronizing and encrypting VMSAs for SNP guests, as allowing userspace to manipulate and/or run a vCPU while its state is being synchronized would at best corrupt vCPU state, and at worst crash the host kernel. Opportunistically assert that vcpu->mutex is held when synchronizing its VMSA (the SEV-ES path already locks vCPUs).
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ad27ce155566f2b4400fa865859834592bd18777 to < 30fd9d8c82087742168db779929d8be0459b0716affectedad27ce155566f2b4400fa865859834592bd18777 to < 4df77742e8b9a6b935bdf46f02fd0aca4d4ee7f5affectedad27ce155566f2b4400fa865859834592bd18777 to < c87938fc7d99a06a7e5477c45b4e5a4148f85d66affectedad27ce155566f2b4400fa865859834592bd18777 to < cb923ee6a80f4e604e6242a4702b59251e61a380affected
Linux Linux
Default version status: affected
6.11affected0 to < 6.11unaffected6.18.24 to ≤ 6.18.*unaffected6.19.14 to ≤ 6.19.*unaffected7.0.1 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected