KVM: x86: Non-Atomicness Vulnerability in Linux Kernel
Summary
GSD-2022-1002870: KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness. Affects Kernel versions >= e964665cc7ca13a16992b205fce63554b9efc78b, < 7cef7042458c52a401d30f2823ae9e9f22f3a90c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for hardware abstraction, process management, memory management, and device drivers. The Kernel's virtualization module, known as KVM (Kernel-based Virtual Machine), enables the hosting of virtual machines on x86-based systems. KVM leverages hardware virtualization extensions to achieve efficient and secure virtualization. However, a vulnerability has been identified in the x86 implementation of KVM that introduces non-atomic behavior in the __try_cmpxchg_user function.
Vulnerability Detail
The vulnerability arises from a typographical error in the __try_cmpxchg_user function within the x86 implementation of KVM. This error leads to non-atomic behavior, potentially resulting in race conditions and data corruption. An attacker with local access to a guest virtual machine could exploit this vulnerability to manipulate shared data structures or disrupt the normal operation of the host system. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No workaround has been mentioned for this vulnerability.
Conclusion
The non-atomicness vulnerability in the x86 implementation of KVM within the Linux Kernel has been identified and addressed in version v5.18.2. Users are strongly advised to update their Kernel to this version or later to mitigate the potential risks associated with this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven. However, it has the potential to introduce non-atomic behavior in the __try_cmpxchg_user function, leading to race conditions and data corruption.
An attacker with local access to a guest virtual machine can potentially exploit this vulnerability.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time monitoring and alerts for open-source vulnerabilities.
Yes, a patch has been released in the Linux Kernel version v5.18.2. Users are advised to update their Kernel to this version or later.
You can find more information about this vulnerability in the GSD-2022-1002870 entry of the GSD Database (https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1002xxx/GSD-2022-1002870.json).
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
