Bug 2188468 (CVE-2023-30456) - CVE-2023-30456 kernel: KVM: nVMX: missing consistency checks for CR0 and CR4
Summary: CVE-2023-30456 kernel: KVM: nVMX: missing consistency checks for CR0 and CR4
Keywords:
Status: NEW
Alias: CVE-2023-30456
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2190255 2190256 2190257 2190258
Blocks: 2185529
TreeView+ depends on / blocked
 
Reported: 2023-04-20 20:50 UTC by Pedro Sampaio
Modified: 2024-03-19 17:27 UTC (History)
45 users (show)

Fixed In Version: kernel 6.3-rc3
Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in the KVM's Intel nested virtualization feature (nVMX). The effective values of the guest CR0 and CR4 registers could differ from those included in the VMCS12. In rare circumstances (i.e., kvm_intel module loaded with parameters nested=1 and ept=0) this could allow a malicious guest to crash the host system, causing a denial of service.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2023:6835 0 None None None 2023-11-09 07:10:54 UTC
Red Hat Product Errata RHBA-2023:7268 0 None None None 2023-11-15 18:25:25 UTC
Red Hat Product Errata RHBA-2023:7328 0 None None None 2023-11-16 11:38:58 UTC
Red Hat Product Errata RHBA-2023:7338 0 None None None 2023-11-16 18:04:18 UTC
Red Hat Product Errata RHBA-2023:7343 0 None None None 2023-11-20 01:58:48 UTC
Red Hat Product Errata RHBA-2023:7346 0 None None None 2023-11-20 09:25:48 UTC
Red Hat Product Errata RHSA-2023:6583 0 None None None 2023-11-07 08:20:25 UTC
Red Hat Product Errata RHSA-2023:6901 0 None None None 2023-11-14 15:15:28 UTC
Red Hat Product Errata RHSA-2023:7077 0 None None None 2023-11-14 15:20:49 UTC
Red Hat Product Errata RHSA-2024:0930 0 None None None 2024-02-21 00:27:36 UTC
Red Hat Product Errata RHSA-2024:1404 0 None None None 2024-03-19 17:27:20 UTC

Description Pedro Sampaio 2023-04-20 20:50:19 UTC 
An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4.

https://github.com/torvalds/linux/commit/112e66017bff7f2837030f34c2bc19501e9212d5
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.8
Comment 3 errata-xmlrpc 2023-11-07 08:20:21 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2023:6583 https://access.redhat.com/errata/RHSA-2023:6583
Comment 4 errata-xmlrpc 2023-11-14 15:15:24 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:6901 https://access.redhat.com/errata/RHSA-2023:6901
Comment 5 errata-xmlrpc 2023-11-14 15:20:46 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2023:7077 https://access.redhat.com/errata/RHSA-2023:7077
Comment 9 errata-xmlrpc 2024-02-21 00:27:32 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support

Via RHSA-2024:0930 https://access.redhat.com/errata/RHSA-2024:0930
Comment 11 errata-xmlrpc 2024-03-19 17:27:16 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:1404 https://access.redhat.com/errata/RHSA-2024:1404
Note You need to log in before you can comment on or make changes to this bug.