Summary
[4.1.12-124.36.1.1]
- KVM: nVMX: Check IO instruction VM-exit conditions (Oliver Upton) [Orabug: 30847137] {CVE-2020-2732}
- KVM: nVMX: Refactor IO bitmap checks into helper function (Oliver Upton) [Orabug: 30847137] {CVE-2020-2732}
- KVM: nVMX: Dont emulate instructions in guest mode (Paolo Bonzini) [Orabug: 30847137] {CVE-2020-2732}
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-124.36.1.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-124.36.1.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-124.36.1.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-124.36.1.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-124.36.1.1.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-124.36.1.1.el7uek |
Vulnerabilities 1
-
Medium 5.8
A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virt…