Vulnerability in Kernel: x86/kvm: Disable kvmclock on all CPUs on shutdown
Summary
UVI-2021-1000786: x86/kvm: Disable kvmclock on all CPUs on shutdown. Affects Kernel versions < 3b0becf8b1ecf642a9edaf4c9628ffc641e490d6. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a crucial component of the Linux operating system that acts as a bridge between the hardware and software layers. It provides essential functionalities, such as process management, memory management, and device drivers. The Kernel is responsible for managing the system's resources and ensuring the smooth execution of processes. One of the features of the Kernel is the kvmclock, which is used in the Kernel-based Virtual Machine (KVM) to provide a clock source for virtual machines. However, a vulnerability has been discovered in the Kernel where kvmclock is not disabled on all CPUs during shutdown, potentially leading to security issues.
Vulnerability Detail
The vulnerability in the Kernel allows kvmclock to remain enabled on some CPUs during system shutdown. This can result in security risks, as the kvmclock can be accessed by malicious actors even after the system has been shut down. The impact and attack plausibility of this vulnerability have not been proven yet. The vulnerability was introduced in an unknown version of the Linux Kernel and has been fixed in version v5.10.43 by commit 3b0becf8b1ecf642a9edaf4c9628ffc641e490d6.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in the Kernel, which allows kvmclock to remain enabled on some CPUs during shutdown, can pose security risks. It is crucial to update the Linux Kernel to version v5.10.43 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Kernel is a crucial component of the Linux operating system that acts as a bridge between the hardware and software layers. It provides essential functionalities, such as process management, memory management, and device drivers.
kvmclock is a feature in the Kernel-based Virtual Machine (KVM) that provides a clock source for virtual machines.
The impact of this vulnerability is not yet proven. However, it has the potential to allow malicious actors to access kvmclock even after the system has been shut down.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.10.43 or later.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
