In the Linux kernel, the following vulnerability has been resolved: x86/mm/ident_map: Use gbpages only where full GB page should be mapped. When ident_pud_init() uses only GB pages to create identi…
Medium CVSS 5.5
Summary
In the Linux kernel, the following vulnerability has been resolved: x86/mm/ident_map: Use gbpages only where full GB page should be mapped. When ident_pud_init() uses only GB pages to create identity maps, large ranges of addresses not actually requested can be included in the resulting table; a 4K request will map a full GB. This can include a lot of extra address space past that requested, including areas marked reserved by the BIOS. That allows processor speculation into reserved regions…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/a23823098ab2c277c14fc110b97d8d5c83597195 Patch
- https://git.kernel.org/stable/c/cb2555fb0223edac9e7820f16de17ae04a39ad39
- https://git.kernel.org/stable/c/cc31744a294584a36bf764a0ffa3255a8e69f036 Patch
- https://git.kernel.org/stable/c/d113f9723f2bfd9c6feeb899b8ddbee6b8a6e01f
- https://git.kernel.org/stable/c/d80a99892f7a992d103138fa4636b2c33abd6740 Patch
- https://git.kernel.org/stable/c/fe9bab1d6441ed49dc3dd0acce4c2215e8d85447
Timeline
- nvd_ingest NVD