NetSight
IP …
medium5.5

CVE-2024-36953

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() vgic_v2_parse_attr() i…

Impact

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() vgic_v2_parse_attr() is responsible for finding the vCPU that matches the user-provided CPUID, which (of course) may not be valid. If the ID is invalid, kvm_get_vcpu_by_id() returns NULL, which isn't handled gracefully. Similar to the GICv3 uaccess flow, check that kvm_get_vcpu_by_id() actually returns something and fail the ioctl if not.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.7 before 5.10.217
from 5.11 before 5.15.159
from 5.16 before 6.1.91
from 6.2 before 6.6.31
from 6.7 before 6.8.10
Version 6.9
DebianDebian Linux
Version 10.0

Weakness classification

CWE-476

References