|
KASAN: use-after-free Read in kvm_setup_guest_pvclock
prio:normal
kvm-x86
|
19 |
syz, C |
|
|
5 |
79d |
110d
|
2/29 |
never |
KVM: pfncache: use a dedicated invalidation sequence for cache refresh
|
|
KASAN: use-after-free Read in kvm_xen_shared_info_init
prio:high
kvm-x86
kvm
|
19 |
syz, C |
|
|
11 |
41d |
151d
|
2/29 |
never |
KVM: pfncache: use a dedicated invalidation sequence for cache refresh
|
|
WARNING: kmalloc bug in memslot_rmap_alloc
kvm-x86
|
-1 |
syz, C |
unreliable |
|
3 |
1839d |
1868d
|
1/29 |
never |
KVM: replace large kvmalloc allocation with vmalloc
|
|
WARNING in hv_tlb_flush_enqueue
prio:high
kvm-x86
|
-1 |
syz, C |
|
|
2 |
118d |
117d
|
27/29 |
never |
c84d86130f24
KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses
|
|
WARNING in vcpu_run (2)
prio:high
kvm-x86
|
-1 |
syz, C |
error |
|
5 |
90d |
120d
|
27/29 |
never |
681fb81a4171
KVM: x86: Don't WARN if IRQ disappears because it was cleared from the PIC
|
|
INFO: rcu detected stall in kvm_vcpu_ioctl (4)
prio:high
kvm-x86
kvm
|
1 |
syz, C |
error |
|
8 |
72d |
295d
|
27/29 |
never |
0ca49fbd2883
KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
|
|
WARNING in vcpu_run
kvm-x86
|
-1 |
syz, C |
done |
|
43 |
277d |
722d
|
29/29 |
164d |
ead63640d4e7
KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
|
|
WARNING in kvm_apic_accept_events (2)
kvm-x86
|
-1 |
syz, C |
|
|
72 |
252d |
326d
|
29/29 |
164d |
c4a365cd4a4e
KVM: x86: Drop WARN on INIT/SIPI being blocked when vCPU is in Wait-For-SIPI
|
|
WARNING in kvm_arch_vcpu_ioctl_run (6)
kvm-x86
|
-1 |
syz, C |
|
|
117 |
376d |
457d
|
29/29 |
353d |
e750f8539128
KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
|
|
WARNING in kvm_apic_accept_events
kvm-x86
|
-1 |
syz, C |
error |
done |
27 |
401d |
499d
|
29/29 |
367d |
0fe3e8d804fd
KVM: x86: Move INIT_RECEIVED vs. INIT/SIPI blocked check to KVM_RUN
|
|
WARNING in vmx_handle_exit (2)
kvm-x86
|
-1 |
syz, C |
|
|
3 |
595d |
675d
|
28/29 |
494d |
64c947a1cf35
KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter
|
|
WARNING in vmx_handle_exit
kvm-x86
|
-1 |
syz, C |
error |
|
5 |
755d |
928d
|
28/29 |
725d |
3f6821aa147b
KVM: x86: Forcibly leave nested if RSM to L2 hits shutdown
|
|
WARNING in kvm_recalculate_apic_map
kvm-x86
|
-1 |
syz, C |
done |
|
23 |
795d |
831d
|
28/29 |
744d |
4b7c3f6d04bd
KVM: x86: Make x2APIC ID 100% readonly
|
|
WARNING in mmu_free_root_page
kvm-x86
|
-1 |
syz, C |
|
|
104 |
910d |
933d
|
25/29 |
878d |
1bc26cb90902
KVM: x86/mmu: Precisely invalidate MMU root_role during CPUID update
|
|
WARNING in clear_dirty_gfn_range
kvm-x86
|
-1 |
syz, C |
|
|
3 |
927d |
949d
|
25/29 |
878d |
2673dfb591a3
KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
|
|
KMSAN: uninit-value in em_ret_far
kvm-x86
|
7 |
syz, C |
|
|
37 |
946d |
1012d
|
25/29 |
919d |
6fd1e3963f20
KVM: x86: Clean up partially uninitialized integer in emulate_pop()
|
|
WARNING in kvm_arch_vcpu_ioctl_run (5)
kvm-x86
|
-1 |
syz, C |
error |
|
343 |
1135d |
1223d
|
23/29 |
1101d |
26a0652cb453
KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
|
|
WARNING in kvm_arch_vcpu_ioctl_run (4)
kvm-x86
|
-1 |
syz, C |
error |
|
288 |
1228d |
1311d
|
22/29 |
1227d |
0dc902267cb3
KVM: x86: Suppress pending MMIO write exits if emulator detects exception
|
|
KMSAN: uninit-value in kvm_irq_delivery_to_apic_fast
kvm-x86
|
7 |
syz, C |
|
|
20 |
1539d |
1572d
|
22/29 |
1331d |
8a414f943f8b
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
|
|
WARNING in vcpu_enter_guest (2)
kvm-x86
|
-1 |
syz, C |
|
|
42 |
1444d |
1453d
|
22/29 |
1331d |
dea0d5a2fde6
KVM: x86: Exempt pending triple fault from event injection sanity check
|
|
BUG: unable to handle kernel paging request in vmx_handle_exit_irqoff
kvm-x86
|
8 |
syz, C |
error |
|
7736 |
1423d |
1445d
|
22/29 |
1331d |
1cfaac2400c7
x86/kasan: Populate shadow for shared chunk of the CPU entry area
|
|
WARNING in vmx_queue_exception (2)
kvm-x86
|
-1 |
syz, C |
|
|
5 |
1630d |
1629d
|
22/29 |
1331d |
053d2290c030
KVM: VMX: Exit to userspace if vCPU has injected exception and invalid state
|
|
BUG: unable to handle kernel paging request in kvm_arch_hardware_enable
kvm-x86
|
8 |
syz, C |
error |
|
28 |
1519d |
1523d
|
22/29 |
1331d |
4ba4f4194274
KVM: Properly unwind VM creation if creating debugfs fails
|
|
WARNING: ODEBUG bug in kvm_xen_vcpu_set_attr
kvm
kvm-x86
io-uring
|
-1 |
syz, C |
done |
|
4 |
1539d |
1591d
|
22/29 |
1331d |
af735db31285
KVM: x86/xen: Initialize Xen timer only once
c03689913635
KVM: x86/xen: Stop Xen timer before changing IRQ
|
|
WARNING in free_loaded_vmcs (3)
kvm-x86
|
-1 |
syz, C |
inconclusive |
|
2 |
1727d |
1727d
|
22/29 |
1331d |
f7e570780efc
KVM: x86: Forcibly leave nested virt when SMM state is toggled
|
|
WARNING in kvm_arch_vcpu_ioctl_run (3)
kvm-x86
|
-1 |
syz, C |
done |
error |
16157 |
1332d |
3125d
|
22/29 |
1331d |
ec6e4d863258
KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
|
|
memory leak in kvm_vcpu_ioctl_set_cpuid2
kvm-x86
|
3 |
syz, C |
|
|
1 |
1729d |
1725d
|
22/29 |
1331d |
811f95ff9527
KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
|
|
general protection fault in kvm_arch_vcpu_ioctl
kvm-x86
|
2 |
syz, C |
inconclusive |
|
365 |
1532d |
1569d
|
22/29 |
1331d |
f83894b24c2a
KVM: x86: Fix handling of APIC LVT updates when userspace changes MCG_CAP
|
|
possible deadlock in scheduler_tick
kvm-x86
|
4 |
syz, C |
error |
|
99 |
2021d |
2033d
|
20/29 |
1676d |
a83829f56c7c
KVM: x86: disable interrupts while pvclock_gtod_sync_lock is taken
8228c77d8b56
KVM: x86: switch pvclock_gtod_sync_lock to a raw spinlock
|
|
general protection fault in rcu_segcblist_enqueue
kvm-x86
|
2 |
syz, C |
done |
done |
368 |
1867d |
1931d
|
20/29 |
1684d |
eb7511bf9182
KVM: x86: Handle SRCU initialization failure during page track init
|
|
WARNING in nested_vmx_vmexit
kvm-x86
|
-1 |
syz, C |
done |
|
101 |
1760d |
1777d
|
20/29 |
1684d |
a80dfc025924
KVM: VMX: Always clear vmx->fail on emulation_required
|
|
BUG: spinlock bad magic in synchronize_srcu
kvm-x86
|
4 |
syz, C |
done |
done |
3254 |
1846d |
2216d
|
20/29 |
1684d |
eb7511bf9182
KVM: x86: Handle SRCU initialization failure during page track init
|
|
KMSAN: uninit-value in kvm_cpuid
kvm-x86
|
7 |
syz, C |
|
|
22 |
1818d |
1842d
|
20/29 |
1684d |
e8a747d0884e
KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
|
|
WARNING in exception_type
kvm-x86
|
-1 |
syz, C |
error |
|
1 |
1875d |
1874d
|
20/29 |
1803d |
e7177339d7b5
Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
|
|
WARNING in x86_emulate_instruction
kvm-x86
|
-1 |
syz, C |
done |
|
4 |
1978d |
1975d
|
20/29 |
1803d |
da6393cdd8aa
KVM: X86: Fix warning caused by stale emulation context
|
|
general protection fault in gfn_to_rmap (2)
kvm-x86
|
2 |
syz, C |
done |
|
1 |
1958d |
1957d
|
20/29 |
1803d |
78fcb2c91adf
KVM: x86: Immediately reset the MMU context when the SMM flag is cleared
|
|
general protection fault in kvm_hv_irq_routing_update
kvm
kvm-x86
|
2 |
syz, C |
done |
|
33 |
2053d |
2059d
|
20/29 |
2017d |
919f4ebc5987
KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref
|
|
BUG: unable to handle kernel paging request in __kvm_mmu_prepare_zap_page
kvm-x86
|
8 |
syz |
error |
|
2 |
2780d |
2791d
|
20/29 |
2038d |
47c42e6b4192
KVM: x86: fix handling of role.cr4_pae and rename it to 'gpte_size'
|
|
UBSAN: shift-out-of-bounds in intel_pmu_refresh
kvm-x86
|
-1 |
syz, C |
unreliable |
|
1237 |
2089d |
2138d
|
19/29 |
2048d |
e61ab2a320c3
KVM: x86/pmu: Fix UBSAN shift-out-of-bounds warning in intel_pmu_refresh()
|
|
WARNING in handle_exception_nmi
kvm-x86
|
-1 |
syz, C |
error |
done |
2653 |
2202d |
2207d
|
15/29 |
2161d |
f8e48a3dca06
lockdep: Fix preemption WARN for spurious IRQ-enable
|
|
BUG: unable to handle kernel paging request in pvclock_gtod_notify
kvm-x86
|
8 |
syz, C |
done |
done |
8 |
2207d |
2226d
|
15/29 |
2161d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
BUG: unable to handle kernel paging request in vmx_vcpu_run
kvm-x86
|
8 |
syz, C |
error |
error |
194 |
2997d |
3111d
|
15/29 |
2218d |
0447378a4a79
kvm: vmx: Nested VM-entry prereqs for event inj.
|
|
general protection fault in __apic_accept_irq (2)
kvm-x86
|
2 |
syz, C |
done |
|
9 |
2305d |
2301d
|
15/29 |
2269d |
9d3c447c72fb
KVM: X86: Fix async pf caused null-ptr-deref
|
|
WARNING in kvm_inject_emulated_page_fault
kvm-x86
|
-1 |
syz, C |
done |
|
20 |
2307d |
2326d
|
15/29 |
2283d |
7a35e515a705
KVM: VMX: Properly handle kvm_read/write_guest_virt*() result
|
|
kernel BUG at arch/x86/kvm/mmu/mmu.c:LINE! (2)
kvm-x86
|
-1 |
syz, C |
done |
|
46328 |
2304d |
2335d
|
15/29 |
2283d |
7d2e8748af62
KVM: x86: Initialize tdp_level during vCPU creation
|
|
BUG: unable to handle kernel NULL pointer dereference in handle_external_interrupt_irqoff
kvm-x86
|
10 |
syz, C |
done |
|
6404 |
2396d |
2400d
|
15/29 |
2351d |
428b8f1d9f92
KVM: VMX: don't allow memory operands for inline asm that modifies SP
|
|
WARNING in vcpu_enter_guest
kvm-x86
|
-1 |
syz |
done |
|
19 |
2401d |
2514d
|
15/29 |
2351d |
d33294541889
KVM: x86: remove bogus user-triggerable WARN_ON
|
|
kernel BUG at arch/x86/kvm/mmu/mmu.c:LINE!
kvm-x86
|
-1 |
syz, C |
done |
|
6 |
2489d |
2497d
|
15/29 |
2433d |
005ba37cb89b
mm: thp: KVM: Explicitly check for THP when populating secondary MMU
|
|
KASAN: vmalloc-out-of-bounds Write in kvm_dev_ioctl_get_cpuid
kvm-x86
|
21 |
syz, C |
|
|
41 |
2509d |
2510d
|
15/29 |
2475d |
433f4ba19041
KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332)
|
|
KASAN: use-after-free Read in __schedule (2)
kvm-x86
|
19 |
syz, C |
|
done |
961 |
2780d |
2998d
|
13/29 |
2523d |
26b471c7e2f7
KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
|
|
WARNING in handle_desc
kvm-x86
|
-1 |
syz, C |
done |
|
6 |
2584d |
2593d
|
13/29 |
2559d |
3ca94192278c
KVM: X86: Fix userspace set invalid CR4
|
|
WARNING in kvm_set_tsc_khz
kvm-x86
|
-1 |
syz, C |
|
|
5 |
2992d |
2989d
|
12/29 |
2637d |
3f16a5c31839
KVM: x86: degrade WARN to pr_warn_ratelimited
|
|
general protection fault in vcpu_enter_guest (2)
kvm-x86
|
2 |
syz, C |
done |
|
11286 |
2726d |
2732d
|
12/29 |
2700d |
b904cb8dff82
KVM: lapic: Check for in-kernel LAPIC before deferencing apic pointer
|
|
WARNING in free_loaded_vmcs (2)
kvm-x86
|
-1 |
syz |
done |
|
5 |
2965d |
2986d
|
11/29 |
2755d |
5bea5123cbf0
KVM: VMX: check nested state and CR4.VMXE against SMM
|
|
general protection fault in kvm_lapic_hv_timer_in_use
kvm-x86
|
2 |
syz |
done |
|
205 |
2947d |
2989d
|
11/29 |
2755d |
26b471c7e2f7
KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
|
|
WARNING in enter_vmx_operation
kvm-x86
|
-1 |
syz |
done |
|
8 |
2958d |
2970d
|
11/29 |
2755d |
5bea5123cbf0
KVM: VMX: check nested state and CR4.VMXE against SMM
|
|
KMSAN: kernel-infoleak in vmx_get_nested_state
kvm-x86
|
9 |
syz, C |
|
|
6 |
2783d |
2894d
|
11/29 |
2782d |
3a33d030daaa
kvm: x86/vmx: Use kzalloc for cached_vmcs12
|
|
general protection fault in kvm_ioapic_scan_entry
kvm-x86
|
2 |
syz, C |
|
|
148 |
2877d |
2986d
|
11/29 |
2789d |
dcbd3e49c2f0
KVM: X86: Fix NULL deref in vcpu_scan_ioapic
|
|
general protection fault in kvm_arch_vcpu_ioctl_run
kvm-x86
|
2 |
syz, C |
|
|
12 |
2859d |
2874d
|
11/29 |
2837d |
dcbd3e49c2f0
KVM: X86: Fix NULL deref in vcpu_scan_ioapic
|
|
KMSAN: kernel-infoleak in kvm_arch_vcpu_ioctl
kvm-x86
|
9 |
syz, C |
|
|
31 |
2877d |
2892d
|
11/29 |
2871d |
7f9ad1dfa3c7
KVM: nVMX: Fix kernel info-leak when enabling KVM_CAP_HYPERV_ENLIGHTENED_VMCS more than once
|
|
WARNING in __mutex_unlock_slowpath
kvm
kvm-x86
|
-1 |
syz, C |
|
|
2 |
3090d |
3093d
|
5/29 |
3054d |
7a4deea1aa8b
idr: fix invalid ptr dereference on item delete
|
|
general protection fault in __radix_tree_delete
kvm
kvm-x86
|
2 |
syz, C |
|
|
38 |
3067d |
3093d
|
5/29 |
3054d |
7a4deea1aa8b
idr: fix invalid ptr dereference on item delete
|
|
general protection fault in native_write_cr4
kvm-x86
|
2 |
syz, C |
|
|
132300 |
3119d |
3223d
|
5/29 |
3116d |
8eb3f87d9031
KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit
|
|
WARNING in kvm_arch_vcpu_ioctl_run (2)
kvm-x86
|
-1 |
syz, C |
|
|
61018 |
3183d |
3272d
|
4/29 |
3140d |
c37c28730bb0
KVM: VMX: Fix rflags cache during vCPU reset
|
|
kernel BUG at arch/x86/kvm/mmu.c:LINE!
kvm-x86
|
-1 |
syz, C |
|
|
695 |
3155d |
3272d
|
4/29 |
3147d |
b28676bb8ae4
KVM: mmu: Fix overlap between public and private memslots
|
|
WARNING in __x86_set_memory_region
kvm-x86
|
-1 |
syz, C |
|
|
716 |
3155d |
3273d
|
4/29 |
3147d |
103c763c72dd
KVM/x86: remove WARN_ON() for when vm_munmap() fails
|
|
WARNING in handle_ept_misconfig
kvm-x86
|
-1 |
syz, C |
|
|
238 |
3155d |
3278d
|
4/29 |
3147d |
95e057e25892
KVM: X86: Fix SMRAM accessing even if VM is shutdown
|
|
KASAN: use-after-free Read in __schedule
kvm-x86
|
19 |
syz, C |
|
|
145 |
3222d |
3223d
|
4/29 |
3167d |
8dbfb2bf1bb3
KVM: x86: don't forget vcpu_put() in kvm_arch_vcpu_ioctl_set_sregs()
|
|
KASAN: stack-out-of-bounds Read in write_mmio
kvm-x86
|
17 |
syz, C |
|
|
3 |
3232d |
3242d
|
4/29 |
3185d |
e39d200fa5bf
KVM: Fix stack-out-of-bounds read in write_mmio
|
|
WARNING in free_loaded_vmcs
kvm-x86
|
-1 |
syz, C |
|
|
170 |
3245d |
3252d
|
4/29 |
3187d |
b74558259c51
KVM: VMX: Fix vmx->nested freeing when no SMI handler
|