SB20250502208 - Improper locking in Linux kernel x86 kvm

Description

This security bulletin contains information about 1 security vulnerability.

1) Improper locking (CVE-ID: CVE-2022-49850)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the kvm_gfn_to_pfn_cache_unmap(), kvm_gfn_to_pfn_cache_init() and kvm_gfn_to_pfn_cache_destroy() functions in virt/kvm/pfncache.c, within the kvm_xen_shared_info_init(), kvm_xen_vcpu_set_attr(), kvm_xen_init_vcpu(), kvm_xen_destroy_vcpu() and kvm_xen_destroy_vm() functions in arch/x86/kvm/xen.c, within the kvm_write_system_time(), kvm_pv_enable_async_pf_int() and kvm_arch_vcpu_create() functions in arch/x86/kvm/x86.c. A local user can perform a denial of service (DoS) attack.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/1d4ff73062096c21b47954d2996b4df259777bda
• https://git.kernel.org/stable/c/36ff974b0310771417c0be64b64aa221bd70d63d
• https://git.kernel.org/stable/c/3c89ca6d3dfa6c09c515807a7a97a521f5d5147e
• https://git.kernel.org/stable/c/8ac932a4921a96ca52f61935dbba64ea87bbd5dc
• https://git.kernel.org/stable/c/8b4506cff6630bb474bb46a2a75c31e533a756ba
• https://git.kernel.org/stable/c/abc082aac0d9b6b926038fc3adb7008306581be2
• https://git.kernel.org/stable/c/cb029b54953420f7a2d65100f1c5107f14411bdc
• https://git.kernel.org/stable/c/f0cc93080d4c09510b74ecba87fd778cca390bb1
• https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.267