Summary
[4.14.35-1902.10.8]
- KVM: nVMX: Check IO instruction VM-exit conditions (Oliver Upton) [Orabug: 30847136] {CVE-2020-2732}
- KVM: nVMX: Refactor IO bitmap checks into helper function (Oliver Upton) [Orabug: 30847136] {CVE-2020-2732}
- KVM: nVMX: Dont emulate instructions in guest mode (Paolo Bonzini) [Orabug: 30847136] {CVE-2020-2732}
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.14.35-1902.10.8.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.14.35-1902.10.8.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.14.35-1902.10.8.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.14.35-1902.10.8.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.14.35-1902.10.8.el7uek |
| Oracle Linux · 7 | kernel-uek-headers | 0:4.14.35-1902.10.8.el7uek |
| Oracle Linux · 7 | kernel-uek-tools | 0:4.14.35-1902.10.8.el7uek |
| Oracle Linux · 7 | kernel-uek-tools-libs | 0:4.14.35-1902.10.8.el7uek |
| Oracle Linux · 7 | kernel-uek-tools-libs-devel | 0:4.14.35-1902.10.8.el7uek |
| Oracle Linux · 7 | perf | 0:4.14.35-1902.10.8.el7uek |
| Oracle Linux · 7 | python-perf | 0:4.14.35-1902.10.8.el7uek |
Vulnerabilities 1
-
Medium 5.8
A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virt…