NetSight
IP …
medium5.5

CVE-2024-46707

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 On a system with a GICv3, i…

Impact

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 On a system with a GICv3, if a guest hasn't been configured with GICv3 and that the host is not capable of GICv2 emulation, a write to any of the ICC_*SGI*_EL1 registers is trapped to EL2. We therefore try to emulate the SGI access, only to hit a NULL pointer as no private interrupt is allocated (no GIC, remember?). The obvious fix is to give the guest what it deserves, in the shape of a UNDEF exception.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.10.225
from 5.11 before 5.15.166
from 5.16 before 6.1.107
from 6.2 before 6.6.48
from 6.7 before 6.10.7
Version 6.11

Weakness classification

CWE-476

References