In the Linux kernel, the following vulnerability has been resolved: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() Use {READ,WRITE}_ONCE() to access kvm->last_boosted_vcpu to ensur…
高危 CVSS 7.9
摘要
In the Linux kernel, the following vulnerability has been resolved: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() Use {READ,WRITE}_ONCE() to access kvm->last_boosted_vcpu to ensure the loads and stores are atomic. In the extremely unlikely scenario the compiler tears the stores, it's theoretically possible for KVM to attempt to get a vCPU using an out-of-bounds index, e.g. if the write is split into multiple 8-bit stores, and is paired with a 32-bit load on a VM with 257 vC…
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/11a772d5376aa6d3e2e69b5b5c585f79b60c0e17 Patch
- https://git.kernel.org/stable/c/49f683b41f28918df3e51ddc0d928cb2e934ccdb Patch
- https://git.kernel.org/stable/c/4c141136a28421b78f34969b25a4fa32e06e2180 Patch
- https://git.kernel.org/stable/c/71fbc3af3dacb26c3aa2f30bb3ab05c44d082c84 Patch
- https://git.kernel.org/stable/c/82bd728a06e55f5b5f93d10ce67f4fe7e689853a Patch
- https://git.kernel.org/stable/c/92c77807d938145c7c3350c944ef9f39d7f6017c Patch
- https://git.kernel.org/stable/c/95c8dd79f3a14df96b3820b35b8399bd91b2be60 Patch
- https://git.kernel.org/stable/c/a937ef951bba72f48d2402451419d725d70dba20 Patch
- https://git.kernel.org/stable/c/49f683b41f28918df3e51ddc0d928cb2e934ccdb Patch
- https://git.kernel.org/stable/c/92c77807d938145c7c3350c944ef9f39d7f6017c Patch
- https://git.kernel.org/stable/c/95c8dd79f3a14df96b3820b35b8399bd91b2be60 Patch
- https://git.kernel.org/stable/c/a937ef951bba72f48d2402451419d725d70dba20 Patch
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html
时间线
- nvd_ingest NVD