Back to bug 2188468

Who When What Removed Added
Pedro Sampaio 2023-04-20 20:50:34 UTC Blocks 2185529
Mauro Matteo Cascella 2023-04-27 17:26:47 UTC Depends On 2190256, 2190258, 2190255, 2190257
Mauro Matteo Cascella 2023-04-27 17:49:48 UTC Doc Text A flaw was found in the KVM's Intel nested virtualization feature (nVMX). The effective values of the guest CR0 and CR4 registers could differ from those included in the VMCS12. This could allow a malicious nested guest to cause a denial of service condition or other undefined behaviors.
Mauro Matteo Cascella 2023-04-30 19:16:52 UTC Doc Text A flaw was found in the KVM's Intel nested virtualization feature (nVMX). The effective values of the guest CR0 and CR4 registers could differ from those included in the VMCS12. This could allow a malicious nested guest to cause a denial of service condition or other undefined behaviors. A flaw was found in the KVM's Intel nested virtualization feature (nVMX). The effective values of the guest CR0 and CR4 registers could differ from those included in the VMCS12. In rare circumstances (i.e., kvm_intel module loaded with parameters nested=1 and ept=0) this could allow a malicious guest to crash the host system, causing a denial of service.
Mauro Matteo Cascella 2023-04-30 19:26:38 UTC Summary CVE-2023-30456 kernel: KVM: nVMX: add missing consistency checks for CR0 and CR4 CVE-2023-30456 kernel: KVM: nVMX: missing consistency checks for CR0 and CR4
Mauro Matteo Cascella 2023-04-30 19:27:46 UTC Fixed In Version kernel 6.3-rc3
Kazu Yoshida 2023-05-02 03:48:32 UTC CC kyoshida
Red Hat Bugzilla 2023-07-07 08:34:16 UTC Assignee security-response-team nobody

Back to bug 2188468