In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
KVM: arm64: GICv2: Don’t WARN on out-of-range GICV_DIR INTID<\/p>\n
vgic_v2_deactivate() passes the INTID a guest wrote to GICV_DIR straight
\nto vgic_get_vcpu_irq(), and treats a failed lookup as a “can’t happen”
\ncondition with WARN_ON_ONCE().<\/p>\n
The guest can make it happen at will, though: for any INTID outside of
\nthe implemented SGI, PPI and SPI ranges the lookup returns NULL, since
\nGICv2 has no LPIs. A guest running with EOImode==1 writing such an INTID
\nto GICV_DIR triggers the WARN, and panics hosts running with
\npanic_on_warn.<\/p>\n
Drop the WARN and ignore failed lookups.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
KVM: arm64: GICv2: Don’t WARN on out-of-range GICV_DIR INTID<\/p>\n
vgic_v2_deactivate() passes the INTID a guest wrote to GICV_DIR strai<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-21649","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/21649","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=21649"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=21649"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=21649"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}