KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest()
Summary
UVI-2021-1001817: KVM: PPC: Book3S HV: Fix stack handling in idle_kvm_start_guest(). Affects Kernel versions >= 10d91611f426d4bafd2a83d966c36da811b2f7ad, < 80bbb0bc3a0288442f7fe6fc514f4ee1cb06ccb7. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel package is a critical component of the Linux operating system. It provides the core functionality and interfaces for the system's hardware and software components. KVM (Kernel-based Virtual Machine) is a module within the Kernel that enables virtualization on PowerPC (PPC) architecture systems. The Book3S HV refers to the Hypervisor mode of Book3S, which is a family of PowerPC processors. The idle_kvm_start_guest() function is responsible for starting a guest virtual machine in idle mode. However, a vulnerability related to stack handling has been identified in this function.
Vulnerability Detail
The vulnerability in idle_kvm_start_guest() function can potentially be exploited by an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition. The issue arises due to improper stack handling, which can lead to stack corruption and subsequent memory corruption. An attacker with local access to the system or a malicious guest virtual machine could exploit this vulnerability to gain elevated privileges or crash the system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability. It is advised to apply the fix by updating the Kernel to the recommended version.
Conclusion
The vulnerability in idle_kvm_start_guest() function of the Kernel package can potentially allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition. It is crucial to update the Kernel to version v5.4.156 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The vulnerability can potentially allow an attacker to execute arbitrary code or cause a denial-of-service (DoS) condition. This could lead to unauthorized access, privilege escalation, or system crashes.
An attacker with local access to the system or a malicious guest virtual machine could potentially exploit this vulnerability.
There are no known instances of this vulnerability being exploited in the wild at the time of this report.
Yes, a fix for this vulnerability is available in Linux Kernel version v5.4.156 or later.
Users can obtain the updated Kernel from the official Linux Kernel repository: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
