|
KASAN: use-after-free Read in kvm_setup_guest_pvclock
prio:normal
kvm-x86
|
19 |
syz, C |
|
|
5 |
89d |
120d
|
22/29 |
never |
da260bcb56fe
KVM: pfncache: use a dedicated invalidation sequence for cache refresh
|
|
KASAN: use-after-free Read in kvm_xen_shared_info_init
prio:high
kvm-x86
kvm
|
19 |
syz, C |
|
|
11 |
50d |
161d
|
22/29 |
never |
da260bcb56fe
KVM: pfncache: use a dedicated invalidation sequence for cache refresh
|
|
WARNING: kmalloc bug in memslot_rmap_alloc
kvm-x86
|
-1 |
syz, C |
unreliable |
|
3 |
1848d |
1877d
|
1/29 |
never |
KVM: replace large kvmalloc allocation with vmalloc
|
|
WARNING in hv_tlb_flush_enqueue
prio:high
kvm-x86
|
-1 |
syz, C |
|
|
2 |
127d |
126d
|
27/29 |
never |
c84d86130f24
KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses
|
|
WARNING in vcpu_run (2)
prio:high
kvm-x86
|
-1 |
syz, C |
error |
|
5 |
99d |
129d
|
27/29 |
never |
681fb81a4171
KVM: x86: Don't WARN if IRQ disappears because it was cleared from the PIC
|
|
INFO: rcu detected stall in kvm_vcpu_ioctl (4)
prio:high
kvm
kvm-x86
|
1 |
syz, C |
error |
|
8 |
81d |
304d
|
27/29 |
never |
0ca49fbd2883
KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
|
|
WARNING in vcpu_run
kvm-x86
|
-1 |
syz, C |
done |
|
43 |
286d |
731d
|
29/29 |
173d |
ead63640d4e7
KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
|
|
WARNING in kvm_apic_accept_events (2)
kvm-x86
|
-1 |
syz, C |
|
|
72 |
261d |
335d
|
29/29 |
173d |
c4a365cd4a4e
KVM: x86: Drop WARN on INIT/SIPI being blocked when vCPU is in Wait-For-SIPI
|
|
WARNING in kvm_arch_vcpu_ioctl_run (6)
kvm-x86
|
-1 |
syz, C |
|
|
117 |
386d |
466d
|
29/29 |
362d |
e750f8539128
KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
|
|
WARNING in kvm_apic_accept_events
kvm-x86
|
-1 |
syz, C |
error |
done |
27 |
411d |
509d
|
29/29 |
377d |
0fe3e8d804fd
KVM: x86: Move INIT_RECEIVED vs. INIT/SIPI blocked check to KVM_RUN
|
|
possible deadlock in kvm_arch_pm_notifier
kvm-x86
|
4 |
|
|
|
2 |
631d |
658d
|
28/29 |
503d |
d9c5ed0a9b52
KVM: x86: Don't take kvm->lock when iterating over vCPUs in suspend notifier
|
|
WARNING in vmx_handle_exit (2)
kvm-x86
|
-1 |
syz, C |
|
|
3 |
604d |
684d
|
28/29 |
503d |
64c947a1cf35
KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter
|
|
general protection fault in is_page_fault_stale
kvm-x86
|
2 |
|
|
|
3 |
802d |
826d
|
28/29 |
735d |
28cec7f08b8b
KVM: x86/mmu: Check that root is valid/loaded when pre-faulting SPTEs
|
|
WARNING in vmx_handle_exit
kvm-x86
|
-1 |
syz, C |
error |
|
5 |
765d |
937d
|
28/29 |
735d |
3f6821aa147b
KVM: x86: Forcibly leave nested if RSM to L2 hits shutdown
|
|
WARNING in kvm_recalculate_apic_map
kvm-x86
|
-1 |
syz, C |
done |
|
23 |
805d |
840d
|
28/29 |
753d |
4b7c3f6d04bd
KVM: x86: Make x2APIC ID 100% readonly
|
|
WARNING in mmu_free_root_page
kvm-x86
|
-1 |
syz, C |
|
|
104 |
919d |
942d
|
25/29 |
887d |
1bc26cb90902
KVM: x86/mmu: Precisely invalidate MMU root_role during CPUID update
|
|
WARNING in clear_dirty_gfn_range
kvm-x86
|
-1 |
syz, C |
|
|
3 |
936d |
958d
|
25/29 |
887d |
2673dfb591a3
KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
|
|
KMSAN: uninit-value in em_ret_far
kvm-x86
|
7 |
syz, C |
|
|
37 |
956d |
1021d
|
25/29 |
929d |
6fd1e3963f20
KVM: x86: Clean up partially uninitialized integer in emulate_pop()
|
|
KMSAN: uninit-value in em_ret_near_imm
kvm-x86
|
7 |
|
|
|
2 |
966d |
979d
|
25/29 |
929d |
6fd1e3963f20
KVM: x86: Clean up partially uninitialized integer in emulate_pop()
|
|
KMSAN: uninit-value in em_ret
kvm-x86
|
7 |
|
|
|
3 |
957d |
978d
|
25/29 |
929d |
6fd1e3963f20
KVM: x86: Clean up partially uninitialized integer in emulate_pop()
|
|
WARNING in kvm_arch_vcpu_ioctl_run (5)
kvm-x86
|
-1 |
syz, C |
error |
|
343 |
1145d |
1232d
|
23/29 |
1111d |
26a0652cb453
KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
|
|
KASAN: slab-use-after-free Read in kvm_tdp_mmu_invalidate_all_roots
kvm-x86
|
19 |
|
|
|
3 |
1283d |
1282d
|
22/29 |
1236d |
edbdb43fc96b
KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated
|
|
WARNING in kvm_tdp_mmu_invalidate_all_roots
kvm-x86
|
-1 |
|
|
|
1658 |
1281d |
1284d
|
22/29 |
1236d |
edbdb43fc96b
KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated
|
|
WARNING in kvm_arch_vcpu_ioctl_run (4)
kvm-x86
|
-1 |
syz, C |
error |
|
288 |
1237d |
1320d
|
22/29 |
1236d |
0dc902267cb3
KVM: x86: Suppress pending MMIO write exits if emulator detects exception
|
|
KMSAN: uninit-value in kvm_irq_delivery_to_apic_fast
kvm-x86
|
7 |
syz, C |
|
|
20 |
1548d |
1582d
|
22/29 |
1340d |
8a414f943f8b
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
|
|
WARNING in vcpu_enter_guest (2)
kvm-x86
|
-1 |
syz, C |
|
|
42 |
1453d |
1462d
|
22/29 |
1340d |
dea0d5a2fde6
KVM: x86: Exempt pending triple fault from event injection sanity check
|
|
BUG: unable to handle kernel paging request in vmx_handle_exit_irqoff
kvm-x86
|
8 |
syz, C |
error |
|
7736 |
1433d |
1454d
|
22/29 |
1340d |
1cfaac2400c7
x86/kasan: Populate shadow for shared chunk of the CPU entry area
|
|
WARNING in vmx_queue_exception (2)
kvm-x86
|
-1 |
syz, C |
|
|
5 |
1640d |
1639d
|
22/29 |
1340d |
053d2290c030
KVM: VMX: Exit to userspace if vCPU has injected exception and invalid state
|
|
BUG: unable to handle kernel paging request in kvm_arch_hardware_enable
kvm-x86
|
8 |
syz, C |
error |
|
28 |
1529d |
1533d
|
22/29 |
1340d |
4ba4f4194274
KVM: Properly unwind VM creation if creating debugfs fails
|
|
WARNING: ODEBUG bug in kvm_xen_vcpu_set_attr
io-uring
kvm
kvm-x86
|
-1 |
syz, C |
done |
|
4 |
1548d |
1601d
|
22/29 |
1340d |
af735db31285
KVM: x86/xen: Initialize Xen timer only once
c03689913635
KVM: x86/xen: Stop Xen timer before changing IRQ
|
|
WARNING in free_loaded_vmcs (3)
kvm-x86
|
-1 |
syz, C |
inconclusive |
|
2 |
1737d |
1736d
|
22/29 |
1340d |
f7e570780efc
KVM: x86: Forcibly leave nested virt when SMM state is toggled
|
|
WARNING in kvm_arch_vcpu_ioctl_run (3)
kvm-x86
|
-1 |
syz, C |
done |
error |
16157 |
1341d |
3135d
|
22/29 |
1340d |
ec6e4d863258
KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
|
|
memory leak in kvm_vcpu_ioctl_set_cpuid2
kvm-x86
|
3 |
syz, C |
|
|
1 |
1738d |
1734d
|
22/29 |
1340d |
811f95ff9527
KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
|
|
general protection fault in kvm_arch_vcpu_ioctl
kvm-x86
|
2 |
syz, C |
inconclusive |
|
365 |
1541d |
1579d
|
22/29 |
1340d |
f83894b24c2a
KVM: x86: Fix handling of APIC LVT updates when userspace changes MCG_CAP
|
|
possible deadlock in scheduler_tick
kvm-x86
|
4 |
syz, C |
error |
|
99 |
2031d |
2043d
|
20/29 |
1685d |
a83829f56c7c
KVM: x86: disable interrupts while pvclock_gtod_sync_lock is taken
8228c77d8b56
KVM: x86: switch pvclock_gtod_sync_lock to a raw spinlock
|
|
general protection fault in rcu_segcblist_enqueue
kvm-x86
|
2 |
syz, C |
done |
done |
368 |
1876d |
1941d
|
20/29 |
1693d |
eb7511bf9182
KVM: x86: Handle SRCU initialization failure during page track init
|
|
WARNING in nested_vmx_vmexit
kvm-x86
|
-1 |
syz, C |
done |
|
101 |
1770d |
1786d
|
20/29 |
1693d |
a80dfc025924
KVM: VMX: Always clear vmx->fail on emulation_required
|
|
WARNING in vmx_queue_exception
kvm-x86
|
-1 |
|
|
|
8 |
1704d |
1766d
|
20/29 |
1693d |
fc4fad79fc3d
KVM: VMX: Reject KVM_RUN if emulation is required with pending exception
|
|
WARNING in kvm_mmu_uninit_tdp_mmu
kvm-x86
|
-1 |
|
|
|
3 |
1729d |
1812d
|
20/29 |
1693d |
3a0f64de479c
KVM: x86/mmu: Don't advance iterator after restart due to yielding
|
|
BUG: spinlock bad magic in synchronize_srcu
kvm-x86
|
4 |
syz, C |
done |
done |
3254 |
1855d |
2225d
|
20/29 |
1693d |
eb7511bf9182
KVM: x86: Handle SRCU initialization failure during page track init
|
|
KMSAN: uninit-value in kvm_cpuid
kvm-x86
|
7 |
syz, C |
|
|
22 |
1827d |
1852d
|
20/29 |
1693d |
e8a747d0884e
KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
|
|
WARNING in exception_type
kvm-x86
|
-1 |
syz, C |
error |
|
1 |
1884d |
1884d
|
20/29 |
1812d |
e7177339d7b5
Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
|
|
WARNING in x86_emulate_instruction
kvm-x86
|
-1 |
syz, C |
done |
|
4 |
1988d |
1984d
|
20/29 |
1812d |
da6393cdd8aa
KVM: X86: Fix warning caused by stale emulation context
|
|
general protection fault in gfn_to_rmap (2)
kvm-x86
|
2 |
syz, C |
done |
|
1 |
1967d |
1966d
|
20/29 |
1812d |
78fcb2c91adf
KVM: x86: Immediately reset the MMU context when the SMM flag is cleared
|
|
general protection fault in kvm_hv_irq_routing_update
kvm
kvm-x86
|
2 |
syz, C |
done |
|
33 |
2062d |
2069d
|
20/29 |
2026d |
919f4ebc5987
KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref
|
|
BUG: unable to handle kernel paging request in __kvm_mmu_prepare_zap_page
kvm-x86
|
8 |
syz |
error |
|
2 |
2790d |
2800d
|
20/29 |
2047d |
47c42e6b4192
KVM: x86: fix handling of role.cr4_pae and rename it to 'gpte_size'
|
|
UBSAN: shift-out-of-bounds in intel_pmu_refresh
kvm-x86
|
-1 |
syz, C |
unreliable |
|
1237 |
2098d |
2148d
|
19/29 |
2057d |
e61ab2a320c3
KVM: x86/pmu: Fix UBSAN shift-out-of-bounds warning in intel_pmu_refresh()
|
|
UBSAN: shift-out-of-bounds in kvm_vcpu_after_set_cpuid
kvm-x86
|
-1 |
|
|
|
2 |
2140d |
2135d
|
19/29 |
2057d |
2f80d502d627
KVM: x86: fix shift out of bounds reported by UBSAN
|
|
WARNING in handle_exception_nmi
kvm-x86
|
-1 |
syz, C |
error |
done |
2653 |
2212d |
2216d
|
15/29 |
2171d |
f8e48a3dca06
lockdep: Fix preemption WARN for spurious IRQ-enable
|
|
BUG: unable to handle kernel paging request in pvclock_gtod_notify
kvm-x86
|
8 |
syz, C |
done |
done |
8 |
2217d |
2236d
|
15/29 |
2171d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
BUG: unable to handle kernel paging request in vmx_vcpu_run
kvm-x86
|
8 |
syz, C |
error |
error |
194 |
3006d |
3120d
|
15/29 |
2227d |
0447378a4a79
kvm: vmx: Nested VM-entry prereqs for event inj.
|
|
general protection fault in __apic_accept_irq (2)
kvm-x86
|
2 |
syz, C |
done |
|
9 |
2315d |
2311d
|
15/29 |
2278d |
9d3c447c72fb
KVM: X86: Fix async pf caused null-ptr-deref
|
|
WARNING in kvm_inject_emulated_page_fault
kvm-x86
|
-1 |
syz, C |
done |
|
20 |
2316d |
2336d
|
15/29 |
2292d |
7a35e515a705
KVM: VMX: Properly handle kvm_read/write_guest_virt*() result
|
|
BUG: unable to handle kernel NULL pointer dereference in direct_page_fault
kvm-x86
|
10 |
|
|
|
1 |
2322d |
2318d
|
15/29 |
2292d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
BUG: unable to handle kernel NULL pointer dereference in try_async_pf
kvm-x86
|
10 |
|
|
|
1 |
2322d |
2318d
|
15/29 |
2292d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
kernel BUG at arch/x86/kvm/mmu/mmu.c:LINE! (2)
kvm-x86
|
-1 |
syz, C |
done |
|
46328 |
2313d |
2344d
|
15/29 |
2292d |
7d2e8748af62
KVM: x86: Initialize tdp_level during vCPU creation
|
|
BUG: unable to handle kernel NULL pointer dereference in handle_external_interrupt_irqoff
kvm-x86
|
10 |
syz, C |
done |
|
6404 |
2405d |
2410d
|
15/29 |
2361d |
428b8f1d9f92
KVM: VMX: don't allow memory operands for inline asm that modifies SP
|
|
WARNING in vcpu_enter_guest
kvm-x86
|
-1 |
syz |
done |
|
19 |
2410d |
2524d
|
15/29 |
2361d |
d33294541889
KVM: x86: remove bogus user-triggerable WARN_ON
|
|
kernel BUG at arch/x86/kvm/mmu/mmu.c:LINE!
kvm-x86
|
-1 |
syz, C |
done |
|
6 |
2499d |
2506d
|
15/29 |
2442d |
005ba37cb89b
mm: thp: KVM: Explicitly check for THP when populating secondary MMU
|
|
KASAN: vmalloc-out-of-bounds Write in kvm_dev_ioctl_get_cpuid
kvm-x86
|
21 |
syz, C |
|
|
41 |
2518d |
2519d
|
15/29 |
2484d |
433f4ba19041
KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332)
|
|
KASAN: use-after-free Read in __schedule (2)
kvm-x86
|
19 |
syz, C |
|
done |
961 |
2789d |
3008d
|
13/29 |
2532d |
26b471c7e2f7
KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
|
|
WARNING in handle_desc
kvm-x86
|
-1 |
syz, C |
done |
|
6 |
2594d |
2602d
|
13/29 |
2568d |
3ca94192278c
KVM: X86: Fix userspace set invalid CR4
|
|
WARNING in kvm_set_tsc_khz
kvm-x86
|
-1 |
syz, C |
|
|
5 |
3002d |
2998d
|
12/29 |
2646d |
3f16a5c31839
KVM: x86: degrade WARN to pr_warn_ratelimited
|
|
general protection fault in vcpu_enter_guest (2)
kvm-x86
|
2 |
syz, C |
done |
|
11286 |
2736d |
2741d
|
12/29 |
2710d |
b904cb8dff82
KVM: lapic: Check for in-kernel LAPIC before deferencing apic pointer
|
|
WARNING in free_loaded_vmcs (2)
kvm-x86
|
-1 |
syz |
done |
|
5 |
2974d |
2996d
|
11/29 |
2765d |
5bea5123cbf0
KVM: VMX: check nested state and CR4.VMXE against SMM
|
|
general protection fault in kvm_lapic_hv_timer_in_use
kvm-x86
|
2 |
syz |
done |
|
205 |
2957d |
2999d
|
11/29 |
2765d |
26b471c7e2f7
KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
|
|
WARNING in enter_vmx_operation
kvm-x86
|
-1 |
syz |
done |
|
8 |
2968d |
2979d
|
11/29 |
2765d |
5bea5123cbf0
KVM: VMX: check nested state and CR4.VMXE against SMM
|
|
KMSAN: kernel-infoleak in vmx_get_nested_state
kvm-x86
|
9 |
syz, C |
|
|
6 |
2792d |
2904d
|
11/29 |
2792d |
3a33d030daaa
kvm: x86/vmx: Use kzalloc for cached_vmcs12
|
|
general protection fault in kvm_ioapic_scan_entry
kvm-x86
|
2 |
syz, C |
|
|
148 |
2886d |
2996d
|
11/29 |
2799d |
dcbd3e49c2f0
KVM: X86: Fix NULL deref in vcpu_scan_ioapic
|
|
general protection fault in kvm_arch_vcpu_ioctl_run
kvm-x86
|
2 |
syz, C |
|
|
12 |
2868d |
2884d
|
11/29 |
2846d |
dcbd3e49c2f0
KVM: X86: Fix NULL deref in vcpu_scan_ioapic
|
|
KMSAN: kernel-infoleak in kvm_arch_vcpu_ioctl
kvm-x86
|
9 |
syz, C |
|
|
31 |
2886d |
2901d
|
11/29 |
2881d |
7f9ad1dfa3c7
KVM: nVMX: Fix kernel info-leak when enabling KVM_CAP_HYPERV_ENLIGHTENED_VMCS more than once
|
|
WARNING in __mutex_unlock_slowpath
kvm
kvm-x86
|
-1 |
syz, C |
|
|
2 |
3100d |
3102d
|
5/29 |
3063d |
7a4deea1aa8b
idr: fix invalid ptr dereference on item delete
|
|
general protection fault in __radix_tree_delete
kvm
kvm-x86
|
2 |
syz, C |
|
|
38 |
3076d |
3102d
|
5/29 |
3063d |
7a4deea1aa8b
idr: fix invalid ptr dereference on item delete
|
|
INFO: task hung in do_vfs_ioctl
kvm-x86
|
1 |
|
|
|
2 |
3100d |
3117d
|
5/29 |
3085d |
8236b0ae31c8
bdi: wake up concurrent wb_shutdown() callers.
|
|
general protection fault in native_write_cr4
kvm-x86
|
2 |
syz, C |
|
|
132300 |
3128d |
3233d
|
5/29 |
3125d |
8eb3f87d9031
KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit
|
|
WARNING in kvm_arch_vcpu_ioctl_run (2)
kvm-x86
|
-1 |
syz, C |
|
|
61018 |
3193d |
3281d
|
4/29 |
3150d |
c37c28730bb0
KVM: VMX: Fix rflags cache during vCPU reset
|
|
kernel BUG at arch/x86/kvm/mmu.c:LINE!
kvm-x86
|
-1 |
syz, C |
|
|
695 |
3164d |
3281d
|
4/29 |
3156d |
b28676bb8ae4
KVM: mmu: Fix overlap between public and private memslots
|
|
WARNING in __x86_set_memory_region
kvm-x86
|
-1 |
syz, C |
|
|
716 |
3164d |
3282d
|
4/29 |
3156d |
103c763c72dd
KVM/x86: remove WARN_ON() for when vm_munmap() fails
|
|
WARNING in handle_ept_misconfig
kvm-x86
|
-1 |
syz, C |
|
|
238 |
3165d |
3287d
|
4/29 |
3156d |
95e057e25892
KVM: X86: Fix SMRAM accessing even if VM is shutdown
|
|
KASAN: use-after-free Read in __schedule
kvm-x86
|
19 |
syz, C |
|
|
145 |
3231d |
3232d
|
4/29 |
3176d |
8dbfb2bf1bb3
KVM: x86: don't forget vcpu_put() in kvm_arch_vcpu_ioctl_set_sregs()
|
|
KASAN: stack-out-of-bounds Read in write_mmio
kvm-x86
|
17 |
syz, C |
|
|
3 |
3241d |
3252d
|
4/29 |
3194d |
e39d200fa5bf
KVM: Fix stack-out-of-bounds read in write_mmio
|
|
WARNING in free_loaded_vmcs
kvm-x86
|
-1 |
syz, C |
|
|
170 |
3254d |
3262d
|
4/29 |
3197d |
b74558259c51
KVM: VMX: Fix vmx->nested freeing when no SMI handler
|
|
KASAN: double-free or invalid-free in kvm_arch_vcpu_uninit
kvm-x86
|
24 |
|
|
|
1 |
3212d |
3208d
|
3/29 |
3207d |
d76c68109f37
crypto: pcrypt - fix freeing pcrypt instances
|
|
BUG: unable to handle kernel paging request in kvm_arch_vcpu_ioctl_run
kvm-x86
|
8 |
|
|
|
1 |
3246d |
3242d
|
3/29 |
3219d |
7fb983b4dd56
x86/entry: Fix assumptions that the HW TSS is at the beginning of cpu_tss
|