summaryrefslogtreecommitdiffstats
path: root/retired/CVE-2020-27152
blob: 09f080fcd676fe44c4c193c370c506f894bf1f23 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
Description: KVM: host stack overflow due to lazy update IOAPIC
References:
 https://bugzilla.redhat.com/show_bug.cgi?id=1888886
 https://bugzilla.kernel.org/show_bug.cgi?id=208767
 https://lore.kernel.org/kvm/20201024081724.2799401-1-pbonzini@redhat.com/T/#u
Notes:
 carnil> ioapic_lazy_update_eoi() was introduced in f458d039db7e ("kvm:
 carnil> ioapic: Lazy update IOAPIC EOI") in 5.6-rc1 (and not
 carnil> backported).
 carnil> The issue is not fixed by 8be8f932e3db ("kvm: ioapic: Restrict
 carnil> lazy EOI update to edge-triggered interrupts").
 carnil> For v5.9.y fixed in 5.9.2.
Bugs:
upstream: released (5.10-rc1) [77377064c3a94911339f13ce113b3abf265e06da]
4.19-upstream-stable: N/A "Vulnerable code not present"
4.9-upstream-stable: N/A "Vulnerable code not present"
sid: released (5.9.6-1)
4.19-buster-security: N/A "Vulnerable code not present"
4.9-stretch-security: N/A "Vulnerable code not present"

© 2014-2024 Faster IT GmbH | imprint | privacy policy