CVE-2024-35791

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() Do the cache flush of converted pages in svm_register_enc_region() before dropping kvm->lock to fix use-after-free issues where region and/or its array of pages could be freed by a different task, e.g. if userspace has __unregister_enc_region_locked() already queued up for the region. Note, the "obvious" alternative of using local variables doesn't fully resolve the bug, as region->pages is also dynamically allocated. I.e. the region structure its...

Affected product and versions

Product

Linux Linux, linux kernel, debian linux

Affected versions

>= 4f627ecde7329e476a077bb0590db8f27bb8f912 < 2d13b79640b147bd77c34a5998533b2021a4122d, >= 19a23da53932bc8011220bd8c410cb76012de004 < e126b508ed2e616d679d85fca2fbe77bb48bbdd7, >= 19a23da53932bc8011220bd8c410cb76012de004 < 4868c0ecdb6cfde7c70cf478c46e06bb9c7e5865, >= 19a23da53932bc8011220bd8c410cb76012de004 < 12f8e32a5a389a5d58afc67728c76e61beee1ad4, >= 19a23da53932bc8011220bd8c410cb76012de004 < f6d53d8a2617dd58c89171a6b9610c470ebda38a, >= 19a23da53932bc8011220bd8c410cb76012de004 < 5ef1d8c1ddbf696e47b226e11888eaf8d9e8e807, >= f1ecde00ce1694597f923f0d25f7a797c5243d99, >= 848bcb0a1d96f67d075465667d3a1ad4af56311e, >= 5.10.15 < 5.10.215, >= 4.19.176 < 4.20, >= 5.4.98 < 5.5, >= 5.11, >= 5.11.1 < 5.15.154, >= 5.16 < 6.1.84, >= 6.2 < 6.6.24, >= 6.7 < 6.7.12, 5.11, 6.8, 10.0

Fixed versions

4.20, 5.5, 5.10.215, 5.15.154, 6.1.84, 6.6.24, 6.7.12

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416