In the Linux kernel, the following vulnerability has been resolved: KVM: Fix a data race on lastboostedvcpu in kvmvcpuonspin() Use {READ,WRITE}ONCE() to access kvm->lastboostedvcpu to ensure the loads and stores are atomic. In the extremely unlikely scenario the compiler tears the stores, it's theoretically possible for KVM to attempt to get a vCPU using an out-of-bounds index, e.g. if the write is split into multiple 8-bit stores, and is paired with a 32-bit load on a VM with 257 vCPUs: CPU0 CPU1 lastboostedvcpu = 0xff; (lastboostedvcpu = 0x100) lastboostedvcpu[15:8] = 0x01; i = (lastboostedvcpu = 0x1ff) lastboostedvcpu[7:0] = 0x00; vcpu = kvm->vcpuarray[0x1ff]; As detected by KCSAN: BUG: KCSAN: data-race in kvmvcpuonspin [kvm] / kvmvcpuonspin [kvm] write to 0xffffc90025a92344 of 4 bytes by task 4340 on cpu 16: kvmvcpuonspin (arch/x86/kvm/../../../virt/kvm/kvmmain.c:4112) kvm handlepause (arch/x86/kvm/vmx/vmx.c:5929) kvmintel vmxhandleexit (arch/x86/kvm/vmx/vmx.c:? arch/x86/kvm/vmx/vmx.c:6606) kvmintel vcpurun (arch/x86/kvm/x86.c:11107 arch/x86/kvm/x86.c:11211) kvm kvmarchvcpuioctlrun (arch/x86/kvm/x86.c:?) kvm kvmvcpuioctl (arch/x86/kvm/../../../virt/kvm/kvmmain.c:?) kvm _sesysioctl (fs/ioctl.c:52 fs/ioctl.c:904 fs/ioctl.c:890) _x64sysioctl (fs/ioctl.c:890) x64syscall (arch/x86/entry/syscall64.c:33) dosyscall64 (arch/x86/entry/common.c:?) entrySYSCALL64afterhwframe (arch/x86/entry/entry64.S:130) read to 0xffffc90025a92344 of 4 bytes by task 4342 on cpu 4: kvmvcpuonspin (arch/x86/kvm/../../../virt/kvm/kvmmain.c:4069) kvm handlepause (arch/x86/kvm/vmx/vmx.c:5929) kvmintel vmxhandleexit (arch/x86/kvm/vmx/vmx.c:? arch/x86/kvm/vmx/vmx.c:6606) kvmintel vcpurun (arch/x86/kvm/x86.c:11107 arch/x86/kvm/x86.c:11211) kvm kvmarchvcpuioctlrun (arch/x86/kvm/x86.c:?) kvm kvmvcpuioctl (arch/x86/kvm/../../../virt/kvm/kvmmain.c:?) kvm _sesysioctl (fs/ioctl.c:52 fs/ioctl.c:904 fs/ioctl.c:890) _x64sysioctl (fs/ioctl.c:890) x64syscall (arch/x86/entry/syscall64.c:33) dosyscall64 (arch/x86/entry/common.c:?) entrySYSCALL64afterhwframe (arch/x86/entry/entry_64.S:130) value changed: 0x00000012 -> 0x00000000
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-image-unsigned-6.8.0-44-lowlatency-64k": "6.8.0-44.44.1~22.04.1", "linux-image-unsigned-6.8.0-44-lowlatency-64k-dbgsym": "6.8.0-44.44.1~22.04.1", "linux-tools-6.8.0-44-lowlatency-64k": "6.8.0-44.44.1~22.04.1", "linux-lowlatency-hwe-6.8-cloud-tools-6.8.0-44": "6.8.0-44.44.1~22.04.1", "linux-modules-iwlwifi-6.8.0-44-lowlatency": "6.8.0-44.44.1~22.04.1", "linux-modules-6.8.0-44-lowlatency-64k": "6.8.0-44.44.1~22.04.1", "linux-tools-6.8.0-44-lowlatency": "6.8.0-44.44.1~22.04.1", "linux-image-unsigned-6.8.0-44-lowlatency": "6.8.0-44.44.1~22.04.1", "linux-headers-6.8.0-44-lowlatency-64k": "6.8.0-44.44.1~22.04.1", "linux-modules-6.8.0-44-lowlatency": "6.8.0-44.44.1~22.04.1", "linux-buildinfo-6.8.0-44-lowlatency-64k": "6.8.0-44.44.1~22.04.1", "linux-lowlatency-hwe-6.8-lib-rust-6.8.0-44-lowlatency": "6.8.0-44.44.1~22.04.1", "linux-lowlatency-hwe-6.8-headers-6.8.0-44": "6.8.0-44.44.1~22.04.1", "linux-buildinfo-6.8.0-44-lowlatency": "6.8.0-44.44.1~22.04.1", "linux-lowlatency-hwe-6.8-tools-6.8.0-44": "6.8.0-44.44.1~22.04.1", "linux-headers-6.8.0-44-lowlatency": "6.8.0-44.44.1~22.04.1", "linux-cloud-tools-6.8.0-44-lowlatency": "6.8.0-44.44.1~22.04.1", "linux-image-unsigned-6.8.0-44-lowlatency-dbgsym": "6.8.0-44.44.1~22.04.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-buildinfo-6.8.0-1013-nvidia": "6.8.0-1013.14~22.04.1", "linux-modules-6.8.0-1013-nvidia-64k": "6.8.0-1013.14~22.04.1", "linux-modules-nvidia-fs-6.8.0-1013-nvidia": "6.8.0-1013.14~22.04.1", "linux-image-unsigned-6.8.0-1013-nvidia": "6.8.0-1013.14~22.04.1", "linux-tools-6.8.0-1013-nvidia": "6.8.0-1013.14~22.04.1", "linux-modules-extra-6.8.0-1013-nvidia": "6.8.0-1013.14~22.04.1", "linux-headers-6.8.0-1013-nvidia-64k": "6.8.0-1013.14~22.04.1", "linux-buildinfo-6.8.0-1013-nvidia-64k": "6.8.0-1013.14~22.04.1", "linux-image-unsigned-6.8.0-1013-nvidia-64k": "6.8.0-1013.14~22.04.1", "linux-modules-6.8.0-1013-nvidia": "6.8.0-1013.14~22.04.1", "linux-image-unsigned-6.8.0-1013-nvidia-dbgsym": "6.8.0-1013.14~22.04.1", "linux-image-unsigned-6.8.0-1013-nvidia-64k-dbgsym": "6.8.0-1013.14~22.04.1", "linux-modules-nvidia-fs-6.8.0-1013-nvidia-64k": "6.8.0-1013.14~22.04.1", "linux-nvidia-6.8-headers-6.8.0-1013": "6.8.0-1013.14~22.04.1", "linux-nvidia-6.8-tools-6.8.0-1013": "6.8.0-1013.14~22.04.1", "linux-headers-6.8.0-1013-nvidia": "6.8.0-1013.14~22.04.1", "linux-tools-6.8.0-1013-nvidia-64k": "6.8.0-1013.14~22.04.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-buildinfo-6.8.0-44-generic": "6.8.0-44.44.1~22.04.1", "linux-riscv-6.8-tools-6.8.0-44": "6.8.0-44.44.1~22.04.1", "linux-image-6.8.0-44-generic": "6.8.0-44.44.1~22.04.1", "linux-riscv-6.8-headers-6.8.0-44": "6.8.0-44.44.1~22.04.1", "linux-image-6.8.0-44-generic-dbgsym": "6.8.0-44.44.1~22.04.1", "linux-tools-6.8.0-44-generic": "6.8.0-44.44.1~22.04.1", "linux-modules-6.8.0-44-generic": "6.8.0-44.44.1~22.04.1", "linux-headers-6.8.0-44-generic": "6.8.0-44.44.1~22.04.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-cloud-tools-common": "6.8.0-44.44", "linux-lib-rust-6.8.0-44-generic": "6.8.0-44.44", "linux-libc-dev": "6.8.0-44.44", "linux-headers-6.8.0-44": "6.8.0-44.44", "linux-source-6.8.0": "6.8.0-44.44", "linux-image-6.8.0-44-generic": "6.8.0-44.44", "linux-doc": "6.8.0-44.44", "linux-headers-6.8.0-44-generic": "6.8.0-44.44", "linux-buildinfo-6.8.0-44-generic-64k": "6.8.0-44.44", "linux-image-unsigned-6.8.0-44-generic": "6.8.0-44.44", "linux-cloud-tools-6.8.0-44-generic": "6.8.0-44.44", "linux-cloud-tools-6.8.0-44": "6.8.0-44.44", "linux-modules-6.8.0-44-generic-64k": "6.8.0-44.44", "linux-modules-ipu6-6.8.0-44-generic": "6.8.0-44.44", "linux-tools-6.8.0-44-generic": "6.8.0-44.44", "linux-tools-6.8.0-44-generic-64k": "6.8.0-44.44", "linux-image-6.8.0-44-generic-dbgsym": "6.8.0-44.44", "linux-modules-usbio-6.8.0-44-generic": "6.8.0-44.44", "linux-modules-iwlwifi-6.8.0-44-generic": "6.8.0-44.44", "linux-tools-6.8.0-44": "6.8.0-44.44", "linux-tools-host": "6.8.0-44.44", "linux-image-unsigned-6.8.0-44-generic-dbgsym": "6.8.0-44.44", "linux-headers-6.8.0-44-generic-64k": "6.8.0-44.44", "linux-buildinfo-6.8.0-44-generic": "6.8.0-44.44", "linux-tools-common": "6.8.0-44.44", "linux-image-unsigned-6.8.0-44-generic-64k": "6.8.0-44.44", "linux-modules-extra-6.8.0-44-generic": "6.8.0-44.44", "linux-image-unsigned-6.8.0-44-generic-64k-dbgsym": "6.8.0-44.44", "linux-modules-6.8.0-44-generic": "6.8.0-44.44" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-tools-6.8.0-1015-aws": "6.8.0-1015.16", "linux-cloud-tools-6.8.0-1015-aws": "6.8.0-1015.16", "linux-headers-6.8.0-1015-aws": "6.8.0-1015.16", "linux-aws-cloud-tools-6.8.0-1015": "6.8.0-1015.16", "linux-image-unsigned-6.8.0-1015-aws-dbgsym": "6.8.0-1015.16", "linux-aws-headers-6.8.0-1015": "6.8.0-1015.16", "linux-buildinfo-6.8.0-1015-aws": "6.8.0-1015.16", "linux-aws-tools-6.8.0-1015": "6.8.0-1015.16", "linux-image-unsigned-6.8.0-1015-aws": "6.8.0-1015.16", "linux-modules-extra-6.8.0-1015-aws": "6.8.0-1015.16", "linux-modules-6.8.0-1015-aws": "6.8.0-1015.16" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-azure-tools-6.8.0-1014": "6.8.0-1014.16", "linux-headers-6.8.0-1014-azure": "6.8.0-1014.16", "linux-modules-iwlwifi-6.8.0-1014-azure": "6.8.0-1014.16", "linux-modules-extra-6.8.0-1014-azure": "6.8.0-1014.16", "linux-tools-6.8.0-1014-azure": "6.8.0-1014.16", "linux-azure-cloud-tools-6.8.0-1014": "6.8.0-1014.16", "linux-azure-headers-6.8.0-1014": "6.8.0-1014.16", "linux-image-unsigned-6.8.0-1014-azure": "6.8.0-1014.16", "linux-image-unsigned-6.8.0-1014-azure-dbgsym": "6.8.0-1014.16", "linux-modules-involflt-6.8.0-1014-azure": "6.8.0-1014.16", "linux-modules-6.8.0-1014-azure": "6.8.0-1014.16", "linux-cloud-tools-6.8.0-1014-azure": "6.8.0-1014.16", "linux-buildinfo-6.8.0-1014-azure": "6.8.0-1014.16" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-tools-6.8.0-1014-gcp": "6.8.0-1014.16", "linux-buildinfo-6.8.0-1014-gcp": "6.8.0-1014.16", "linux-gcp-tools-6.8.0-1014": "6.8.0-1014.16", "linux-headers-6.8.0-1014-gcp": "6.8.0-1014.16", "linux-gcp-headers-6.8.0-1014": "6.8.0-1014.16", "linux-modules-6.8.0-1014-gcp": "6.8.0-1014.16", "linux-image-unsigned-6.8.0-1014-gcp": "6.8.0-1014.16", "linux-modules-extra-6.8.0-1014-gcp": "6.8.0-1014.16", "linux-image-unsigned-6.8.0-1014-gcp-dbgsym": "6.8.0-1014.16" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-gke-tools-6.8.0-1010": "6.8.0-1010.13", "linux-modules-extra-6.8.0-1010-gke": "6.8.0-1010.13", "linux-image-unsigned-6.8.0-1010-gke-dbgsym": "6.8.0-1010.13", "linux-modules-iwlwifi-6.8.0-1010-gke": "6.8.0-1010.13", "linux-headers-6.8.0-1010-gke": "6.8.0-1010.13", "linux-image-unsigned-6.8.0-1010-gke": "6.8.0-1010.13", "linux-tools-6.8.0-1010-gke": "6.8.0-1010.13", "linux-modules-6.8.0-1010-gke": "6.8.0-1010.13", "linux-gke-headers-6.8.0-1010": "6.8.0-1010.13", "linux-buildinfo-6.8.0-1010-gke": "6.8.0-1010.13" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-ibm-tools-6.8.0-1012": "6.8.0-1012.12", "linux-ibm-source-6.8.0": "6.8.0-1012.12", "linux-modules-extra-6.8.0-1012-ibm": "6.8.0-1012.12", "linux-image-unsigned-6.8.0-1012-ibm": "6.8.0-1012.12", "linux-ibm-headers-6.8.0-1012": "6.8.0-1012.12", "linux-tools-6.8.0-1012-ibm": "6.8.0-1012.12", "linux-headers-6.8.0-1012-ibm": "6.8.0-1012.12", "linux-buildinfo-6.8.0-1012-ibm": "6.8.0-1012.12", "linux-modules-iwlwifi-6.8.0-1012-ibm": "6.8.0-1012.12", "linux-image-unsigned-6.8.0-1012-ibm-dbgsym": "6.8.0-1012.12", "linux-ibm-cloud-tools-common": "6.8.0-1012.12", "linux-modules-6.8.0-1012-ibm": "6.8.0-1012.12" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-image-unsigned-6.8.0-44-lowlatency-64k": "6.8.0-44.44.1", "linux-image-unsigned-6.8.0-44-lowlatency-64k-dbgsym": "6.8.0-44.44.1", "linux-lowlatency-headers-6.8.0-44": "6.8.0-44.44.1", "linux-tools-6.8.0-44-lowlatency-64k": "6.8.0-44.44.1", "linux-lowlatency-tools-common": "6.8.0-44.44.1", "linux-modules-iwlwifi-6.8.0-44-lowlatency": "6.8.0-44.44.1", "linux-modules-6.8.0-44-lowlatency-64k": "6.8.0-44.44.1", "linux-lowlatency-tools-host": "6.8.0-44.44.1", "linux-tools-6.8.0-44-lowlatency": "6.8.0-44.44.1", "linux-lowlatency-cloud-tools-common": "6.8.0-44.44.1", "linux-headers-6.8.0-44-lowlatency-64k": "6.8.0-44.44.1", "linux-modules-6.8.0-44-lowlatency": "6.8.0-44.44.1", "linux-image-unsigned-6.8.0-44-lowlatency": "6.8.0-44.44.1", "linux-buildinfo-6.8.0-44-lowlatency-64k": "6.8.0-44.44.1", "linux-lowlatency-cloud-tools-6.8.0-44": "6.8.0-44.44.1", "linux-lowlatency-tools-6.8.0-44": "6.8.0-44.44.1", "linux-buildinfo-6.8.0-44-lowlatency": "6.8.0-44.44.1", "linux-headers-6.8.0-44-lowlatency": "6.8.0-44.44.1", "linux-lowlatency-lib-rust-6.8.0-44-lowlatency": "6.8.0-44.44.1", "linux-cloud-tools-6.8.0-44-lowlatency": "6.8.0-44.44.1", "linux-image-unsigned-6.8.0-44-lowlatency-dbgsym": "6.8.0-44.44.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-buildinfo-6.8.0-1013-nvidia": "6.8.0-1013.14", "linux-modules-6.8.0-1013-nvidia-64k": "6.8.0-1013.14", "linux-modules-nvidia-fs-6.8.0-1013-nvidia": "6.8.0-1013.14", "linux-image-unsigned-6.8.0-1013-nvidia": "6.8.0-1013.14", "linux-tools-6.8.0-1013-nvidia": "6.8.0-1013.14", "linux-modules-extra-6.8.0-1013-nvidia": "6.8.0-1013.14", "linux-headers-6.8.0-1013-nvidia-64k": "6.8.0-1013.14", "linux-buildinfo-6.8.0-1013-nvidia-64k": "6.8.0-1013.14", "linux-image-unsigned-6.8.0-1013-nvidia-64k": "6.8.0-1013.14", "linux-modules-6.8.0-1013-nvidia": "6.8.0-1013.14", "linux-image-unsigned-6.8.0-1013-nvidia-dbgsym": "6.8.0-1013.14", "linux-image-unsigned-6.8.0-1013-nvidia-64k-dbgsym": "6.8.0-1013.14", "linux-modules-nvidia-fs-6.8.0-1013-nvidia-64k": "6.8.0-1013.14", "linux-nvidia-headers-6.8.0-1013": "6.8.0-1013.14", "linux-nvidia-tools-6.8.0-1013": "6.8.0-1013.14", "linux-headers-6.8.0-1013-nvidia": "6.8.0-1013.14", "linux-nvidia-tools-host": "6.8.0-1013.14", "linux-tools-6.8.0-1013-nvidia-64k": "6.8.0-1013.14" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-nvidia-lowlatency-tools-host": "6.8.0-1013.14.1", "linux-buildinfo-6.8.0-1013-nvidia-lowlatency": "6.8.0-1013.14.1", "linux-nvidia-lowlatency-tools-6.8.0-1013": "6.8.0-1013.14.1", "linux-image-unsigned-6.8.0-1013-nvidia-lowlatency-64k-dbgsym": "6.8.0-1013.14.1", "linux-buildinfo-6.8.0-1013-nvidia-lowlatency-64k": "6.8.0-1013.14.1", "linux-modules-6.8.0-1013-nvidia-lowlatency": "6.8.0-1013.14.1", "linux-image-unsigned-6.8.0-1013-nvidia-lowlatency-dbgsym": "6.8.0-1013.14.1", "linux-tools-6.8.0-1013-nvidia-lowlatency": "6.8.0-1013.14.1", "linux-modules-extra-6.8.0-1013-nvidia-lowlatency": "6.8.0-1013.14.1", "linux-modules-nvidia-fs-6.8.0-1013-nvidia-lowlatency": "6.8.0-1013.14.1", "linux-image-unsigned-6.8.0-1013-nvidia-lowlatency-64k": "6.8.0-1013.14.1", "linux-nvidia-lowlatency-headers-6.8.0-1013": "6.8.0-1013.14.1", "linux-headers-6.8.0-1013-nvidia-lowlatency-64k": "6.8.0-1013.14.1", "linux-image-unsigned-6.8.0-1013-nvidia-lowlatency": "6.8.0-1013.14.1", "linux-headers-6.8.0-1013-nvidia-lowlatency": "6.8.0-1013.14.1", "linux-tools-6.8.0-1013-nvidia-lowlatency-64k": "6.8.0-1013.14.1", "linux-modules-6.8.0-1013-nvidia-lowlatency-64k": "6.8.0-1013.14.1", "linux-modules-nvidia-fs-6.8.0-1013-nvidia-lowlatency-64k": "6.8.0-1013.14.1" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-image-unsigned-6.8.0-1012-oem": "6.8.0-1012.12", "linux-image-unsigned-6.8.0-1012-oem-dbgsym": "6.8.0-1012.12", "linux-modules-ipu6-6.8.0-1012-oem": "6.8.0-1012.12", "linux-headers-6.8.0-1012-oem": "6.8.0-1012.12", "linux-oem-6.8-headers-6.8.0-1012": "6.8.0-1012.12", "linux-modules-6.8.0-1012-oem": "6.8.0-1012.12", "linux-modules-usbio-6.8.0-1012-oem": "6.8.0-1012.12", "linux-tools-6.8.0-1012-oem": "6.8.0-1012.12", "linux-modules-iwlwifi-6.8.0-1012-oem": "6.8.0-1012.12", "linux-oem-6.8-tools-6.8.0-1012": "6.8.0-1012.12", "linux-buildinfo-6.8.0-1012-oem": "6.8.0-1012.12" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-oracle-headers-6.8.0-1012": "6.8.0-1012.12", "linux-modules-iwlwifi-6.8.0-1012-oracle": "6.8.0-1012.12", "linux-image-unsigned-6.8.0-1012-oracle-64k": "6.8.0-1012.12", "linux-image-unsigned-6.8.0-1012-oracle-dbgsym": "6.8.0-1012.12", "linux-modules-6.8.0-1012-oracle-64k": "6.8.0-1012.12", "linux-modules-extra-6.8.0-1012-oracle": "6.8.0-1012.12", "linux-modules-extra-6.8.0-1012-oracle-64k": "6.8.0-1012.12", "linux-tools-6.8.0-1012-oracle": "6.8.0-1012.12", "linux-buildinfo-6.8.0-1012-oracle": "6.8.0-1012.12", "linux-buildinfo-6.8.0-1012-oracle-64k": "6.8.0-1012.12", "linux-headers-6.8.0-1012-oracle-64k": "6.8.0-1012.12", "linux-modules-6.8.0-1012-oracle": "6.8.0-1012.12", "linux-oracle-tools-6.8.0-1012": "6.8.0-1012.12", "linux-tools-6.8.0-1012-oracle-64k": "6.8.0-1012.12", "linux-image-unsigned-6.8.0-1012-oracle-64k-dbgsym": "6.8.0-1012.12", "linux-image-unsigned-6.8.0-1012-oracle": "6.8.0-1012.12", "linux-headers-6.8.0-1012-oracle": "6.8.0-1012.12" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "linux-buildinfo-6.8.0-44-generic": "6.8.0-44.44.1", "linux-riscv-headers-6.8.0-44": "6.8.0-44.44.1", "linux-image-6.8.0-44-generic": "6.8.0-44.44.1", "linux-tools-6.8.0-44-generic": "6.8.0-44.44.1", "linux-image-6.8.0-44-generic-dbgsym": "6.8.0-44.44.1", "linux-modules-6.8.0-44-generic": "6.8.0-44.44.1", "linux-headers-6.8.0-44-generic": "6.8.0-44.44.1", "linux-riscv-tools-6.8.0-44": "6.8.0-44.44.1" } ] }