KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
Summary
GSD-2022-1002482: KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs. Affects Kernel versions >= ca724305a2b02abcbecbf22577536fc8e965ab4f, < 90ae2ca2430c716f10d7a2b42333d0f3c559a99c. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Kernel package is a fundamental component of the Linux operating system. It provides the core functionality and interfaces for the system, including managing hardware resources, process scheduling, and device drivers. The vulnerability affects the Kernel package in the Linux ecosystem. The Kernel package is responsible for managing the virtualization capabilities of the system, including the KVM (Kernel-based Virtual Machine) subsystem. KVM allows running virtual machines on the host system. The vulnerability specifically impacts the x86/svm (Secure Virtual Machine) module within KVM.
Vulnerability Detail
The vulnerability in the x86/svm module of KVM allows for the writing of reserved bits to the PerfEvtSeln (Performance Event Select) Model Specific Registers (MSRs). These MSRs control the selection of performance events for monitoring and profiling purposes. By writing reserved bits, an attacker could potentially manipulate the behavior of the performance monitoring hardware, leading to unauthorized access or privilege escalation. The impact and attack plausibility of this vulnerability have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability in the x86/svm module of KVM, which allows for the writing of reserved bits to PerfEvtSeln MSRs, has been identified. It is recommended to update the Kernel package to the fixed version to mitigate the vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven. However, if successfully exploited, it could potentially lead to unauthorized access or privilege escalation.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze and alert you in real-time if your system is vulnerable.
Yes, the vulnerability has been fixed in the Linux Kernel version v4.9.311. It is recommended to update your Kernel package to a version that includes this fix.
No specific workaround has been provided for this vulnerability. It is recommended to update the Kernel package to the fixed version.
You can find more information about this vulnerability in the GSD-2022-1002482 entry of the GSD Database maintained by the Cloud Security Alliance. The entry can be accessed at https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1002xxx/GSD-2022-1002482.json.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
