Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Prevent RSB underflow before vmenter On VMX, there are some balanced returns between the time the guest's SPEC_CTRL value is written, and the vmenter. Balanced returns (matched by a preceding call) are usually ok, but it's at least theoretically possible an NMI with a deep call stack could empty the RSB before one of the returns. For maximum paranoia, don't allow *any* returns (balanced or otherwise) between the SPEC_CTRL write and the vmenter. [ bp: Fix 32-bit build. ]
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected d28b387fb74da95d69d2615732f50cceb38e9a4d before afd743f6dde87296c6f3414706964c491bb85862; affected d28b387fb74da95d69d2615732f50cceb38e9a4d before 07853adc29a058c5fd143c14e5ac528448a72ed9; affected 44491a23b73789c0a914af4ea55ccf8968adf90b; affected fc6aae9f407810cb153a9133c28735871f9f0a16; affected 3.16.57 before 3.17; affected 4.4.168 before 4.5 |
| Linux / Linux | affected 4.16; unaffected 0 before 4.16; unaffected 5.18.14 through 5.18.*; unaffected 5.19 through * |
CWE
No CWE identifiers supplied.