[PATCH 0/1][OEM-5.10] CVE-2021-29657: SVM VMCB race between time of check and time of use

Timo Aaltonen tjaalton at ubuntu.com
Tue Apr 20 09:52:05 UTC 2021


On 8.4.2021 22.36, Tim Gardner wrote:
> Focal:linux-oem-5.10 is the only kernel that does not have this patch.
> 
> Introduced by 2fcf4876ada8a293d3b92a1033b8b990a7c613d3 v5.10
> Fixed by a58d9166a756a0f4a6618e4f593232593d6df134 v5.12
> 
> [SRU Justification]
> 
> KVM: SVM: load control fields from VMCB12 before checking them
> 
> [Test Plan]
> Launch virtual instances
> 
> [Where problems could occur]
> Entering guest mode could fail if the read race before setting vmcb fields persists.
> 
> [Other Info]
> Released in stable kernels:
> linux-5.10.y
> linux-5.11.y
> 
> 
> 

Hi, 5.10.28 comes with this so oem-5.10 already has it applied


-- 
t



More information about the kernel-team mailing list