CVE-2022-49610: KVM: VMX: Prevent RSB underflow before vmenter
In the Linux kernel, the following vulnerability has been resolved:
KVM: VMX: Prevent RSB underflow before vmenter
On VMX, there are some balanced returns between the time the guest's SPECCTRL value is written, and the vmenter.
Balanced returns (matched by a preceding call) are usually ok, but it's at least theoretically possible an NMI with a deep call stack could empty the RSB before one of the returns.
For maximum paranoia, don't allow any returns (balanced or otherwise) between the SPECCTRL write and the vmenter.
[ bp: Fix 32-bit build. ]
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-49610?
CVE-2022-49610 has a medium severity rating due to its potential impact on the Linux kernel's KVM functionality.
How do I fix CVE-2022-49610?
To remediate CVE-2022-49610, update your Linux kernel to version 5.18.14 or later.
What versions of the Linux kernel are affected by CVE-2022-49610?
CVE-2022-49610 affects Linux kernel versions prior to 5.18.14 and includes several 5.19 release candidates.
Is CVE-2022-49610 exploitable in production environments?
Yes, CVE-2022-49610 can be exploitable in production environments where vulnerable versions of the Linux kernel are deployed.
What systems are primarily impacted by CVE-2022-49610?
CVE-2022-49610 primarily impacts systems running KVM on the Linux kernel.