Bug 2188468 (CVE-2023-30456) - CVE-2023-30456 kernel: KVM: nVMX: missing consistency checks for CR0 and CR4
Summary: CVE-2023-30456 kernel: KVM: nVMX: missing consistency checks for CR0 and CR4
Keywords:
Status: NEW
Alias: CVE-2023-30456
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2190255 2190256 2190257 2190258
Blocks: 2185529
TreeView+ depends on / blocked
 
Reported: 2023-04-20 20:50 UTC by Pedro Sampaio
Modified: 2023-07-07 08:34 UTC (History)
45 users (show)

Fixed In Version: kernel 6.3-rc3
Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in the KVM's Intel nested virtualization feature (nVMX). The effective values of the guest CR0 and CR4 registers could differ from those included in the VMCS12. In rare circumstances (i.e., kvm_intel module loaded with parameters nested=1 and ept=0) this could allow a malicious guest to crash the host system, causing a denial of service.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Pedro Sampaio 2023-04-20 20:50:19 UTC 
An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4.

https://github.com/torvalds/linux/commit/112e66017bff7f2837030f34c2bc19501e9212d5
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.8
Note You need to log in before you can comment on or make changes to this bug.