In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: nSVM: fix potential NULL derefernce on nested migration
Turns out that due to review feedback and/or rebases
I accidentally moved the call to nested_svm_load_cr3 to be too early,
before the NPT is enabled, which is very wrong to do.
KVM can't even access guest memory at that point as nested NPT
is needed for that, and of course it won't initialize the walk_mmu,
which is main issue the patch was addressing.
Fix this for real.
References
Configurations
Configuration 1 (hide)
|
History
07 Aug 2024, 19:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-476 | |
| References | () https://git.kernel.org/stable/c/352193edda48e08e8824a7ece09aec830a603cfe - Patch | |
| References | () https://git.kernel.org/stable/c/e1779c2714c3023e4629825762bcbc43a3b943df - Patch | |
| References | () https://git.kernel.org/stable/c/74b426bea4f7e3b081add2b88d4fba16d3af7ab6 - Patch | |
| First Time |
Linux
Linux linux Kernel |
|
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
16 Jul 2024, 13:43
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-16 12:15
Updated : 2024-08-07 19:22
NVD link : CVE-2022-48793
Mitre link : CVE-2022-48793
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-476
NULL Pointer Dereference