In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Fix host stage-2 PGD refcount
The KVM page-table library refcounts the pages of concatenated stage-2 PGDs individually. However, when running KVM in protected mode, the host's stage-2 PGD is currently managed by EL2 as a single high-order compound page, which can cause the refcount of the tail pages to reach 0 when they shouldn't, hence corrupting the page-table.
Fix this by introducing a new hyp_split_page() helper in the EL2 page allocator (matching the kernel's split_page() function), and make use of it from host_s2_zalloc_pages_exact().
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade dtb-hisiliconUpgrade kernel-rt-livepatchUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade kernel-sourceUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-64kb-livepatch-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade dtb-lgUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-amdUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-64kbUpgrade dtb-sprdUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-rt-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade kernel-debug-livepatch-devel | Aug 9, 2024 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub