Summary
[5.4.17-2136.305.5.5]
- KVM: x86/mmu: do compare-and-exchange of gPTE via the user address (Paolo Bonzini) [Orabug: 34034594] {CVE-2022-1158}
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:5.4.17-2136.305.5.5.el8uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:5.4.17-2136.305.5.5.el8uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:5.4.17-2136.305.5.5.el8uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:5.4.17-2136.305.5.5.el8uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:5.4.17-2136.305.5.5.el8uek |
| Oracle Linux · 7 | kernel-uek-tools | 0:5.4.17-2136.305.5.5.el7uek |
| Oracle Linux · 7 | kernel-uek-tools-libs | 0:5.4.17-2136.305.5.5.el7uek |
| Oracle Linux · 7 | perf | 0:5.4.17-2136.305.5.5.el7uek |
| Oracle Linux · 7 | python-perf | 0:5.4.17-2136.305.5.5.el7uek |
Vulnerabilities 1
-
Unscored —
A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get th…