ACK: [SRU][F][PATCH 0/1] CVE-2024-36953

[Mehmet Basaran]

Acked-by: Mehmet Basaran <mehmet.basaran at canonical.com>

-------------- next part --------------
Massimiliano Pellizzer <massimiliano.pellizzer at canonical.com> writes:

> [Impact]
>
> KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
>
> vgic_v2_parse_attr() is responsible for finding the vCPU that matches
> the user-provided CPUID, which (of course) may not be valid. If the ID
> is invalid, kvm_get_vcpu_by_id() returns NULL, which isn't handled
> gracefully.
>
> Check that kvm_get_vcpu_by_id() actually returns something and fail the ioctl if not.
>
>
> [Fix]
>
> Noble: Fixed
> Jammy: Fixed
> Focal: Backported from linux-5.10.y
> Bionic: Sent to ESM ML
> Xenial: Not affected
>
> [Test Case]
>
> Compile tested only.
>
> [Where problems could occur]
>
> The fix affects ARM KVM VGICv2 implementation. An issue with this fix
> may lead to kernel crashes during the configuration og virtual CPUs.
> Users may also experience failed attempts to start and run properly
> virtual machines.
>
> Oliver Upton (1):
>   KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
>
>  virt/kvm/arm/vgic/vgic-kvm-device.c | 4 +++-
>  1 file changed, 3 insertions(+), 1 deletion(-)
>
> -- 
> 2.43.0
>
>
> -- 
> kernel-team mailing list
> kernel-team at lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 873 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20241001/af57a2f9/attachment.sig>