8.8

CVE-2026-63937

KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer

In the Linux kernel, the following vulnerability has been resolved:

KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer

Use READ_ONCE() when reading entries/indices from the guest-accessible
Page State Change buffer to defend against TOCTOU bugs.

Don't bother with READ_ONCE()/WRITE_ONCE() for cases where KVM is writing
(and not consuming the result!), as the guest isn't supposed to touch the
buffer while it's being processed.  I.e. using READ_ONCE() is all about
protecting against misbehaving guests.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 9b54e248d2644be71cb394eb85f31ad99e023a05
Version < bd232801ef1d1fd985d2d4ca3cd1d888303ca86f
Status affected
Version 9b54e248d2644be71cb394eb85f31ad99e023a05
Version < b1dfaa6f7a957726a6800135be3659fbe4bbf2a4
Status affected
Version 9b54e248d2644be71cb394eb85f31ad99e023a05
Version < edbbe88f83b524434974e84808d3093199d67c24
Status affected
Version 9b54e248d2644be71cb394eb85f31ad99e023a05
Version < c8cc238093ca6c99267032f6cfe78f59389f3157
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.11
Status affected
Version 0
Version < 6.11
Status unaffected
Version <= 6.12.*
Version 6.12.93
Status unaffected
Version <= 6.18.*
Version 6.18.35
Status unaffected
Version <= 7.0.*
Version 7.0.12
Status unaffected
Version <= *
Version 7.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.059
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.8 2 6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/bd232801ef1d1fd985d2d4ca3cd1d888303ca86f
https://git.kernel.org/stable/c/b1dfaa6f7a957726a6800135be3659fbe4bbf2a4
https://git.kernel.org/stable/c/edbbe88f83b524434974e84808d3093199d67c24
https://git.kernel.org/stable/c/c8cc238093ca6c99267032f6cfe78f59389f3157