|
KASAN: use-after-free Read in kvm_setup_guest_pvclock
prio:normal
kvm-x86
|
19 |
syz, C |
|
|
5 |
66d |
97d
|
2/29 |
never |
KVM: pfncache: use a dedicated invalidation sequence for cache refresh
|
|
KASAN: use-after-free Read in kvm_xen_shared_info_init
prio:high
kvm-x86
kvm
|
19 |
syz, C |
|
|
11 |
28d |
138d
|
2/29 |
never |
KVM: pfncache: use a dedicated invalidation sequence for cache refresh
|
|
WARNING: kmalloc bug in memslot_rmap_alloc
kvm-x86
|
-1 |
syz, C |
unreliable |
|
3 |
1826d |
1855d
|
1/29 |
never |
KVM: replace large kvmalloc allocation with vmalloc
|
|
WARNING in hv_tlb_flush_enqueue
prio:high
kvm-x86
|
-1 |
syz, C |
|
|
2 |
105d |
104d
|
27/29 |
never |
c84d86130f24
KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses
|
|
WARNING in vcpu_run (2)
prio:high
kvm-x86
|
-1 |
syz, C |
error |
|
5 |
77d |
107d
|
27/29 |
never |
681fb81a4171
KVM: x86: Don't WARN if IRQ disappears because it was cleared from the PIC
|
|
INFO: rcu detected stall in kvm_vcpu_ioctl (4)
prio:high
kvm-x86
kvm
|
1 |
syz, C |
error |
|
8 |
59d |
282d
|
27/29 |
never |
0ca49fbd2883
KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
|
|
WARNING in vcpu_run
kvm-x86
|
-1 |
syz, C |
done |
|
43 |
264d |
709d
|
29/29 |
151d |
ead63640d4e7
KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
|
|
WARNING in kvm_apic_accept_events (2)
kvm-x86
|
-1 |
syz, C |
|
|
72 |
239d |
313d
|
29/29 |
151d |
c4a365cd4a4e
KVM: x86: Drop WARN on INIT/SIPI being blocked when vCPU is in Wait-For-SIPI
|
|
WARNING in kvm_arch_vcpu_ioctl_run (6)
kvm-x86
|
-1 |
syz, C |
|
|
117 |
363d |
444d
|
29/29 |
340d |
e750f8539128
KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
|
|
WARNING in kvm_apic_accept_events
kvm-x86
|
-1 |
syz, C |
error |
done |
27 |
388d |
486d
|
29/29 |
354d |
0fe3e8d804fd
KVM: x86: Move INIT_RECEIVED vs. INIT/SIPI blocked check to KVM_RUN
|
|
WARNING in vmx_handle_exit (2)
kvm-x86
|
-1 |
syz, C |
|
|
3 |
582d |
662d
|
28/29 |
481d |
64c947a1cf35
KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter
|
|
WARNING in vmx_handle_exit
kvm-x86
|
-1 |
syz, C |
error |
|
5 |
742d |
915d
|
28/29 |
712d |
3f6821aa147b
KVM: x86: Forcibly leave nested if RSM to L2 hits shutdown
|
|
WARNING in kvm_recalculate_apic_map
kvm-x86
|
-1 |
syz, C |
done |
|
23 |
782d |
818d
|
28/29 |
731d |
4b7c3f6d04bd
KVM: x86: Make x2APIC ID 100% readonly
|
|
WARNING in mmu_free_root_page
kvm-x86
|
-1 |
syz, C |
|
|
104 |
897d |
920d
|
25/29 |
865d |
1bc26cb90902
KVM: x86/mmu: Precisely invalidate MMU root_role during CPUID update
|
|
WARNING in clear_dirty_gfn_range
kvm-x86
|
-1 |
syz, C |
|
|
3 |
914d |
936d
|
25/29 |
865d |
2673dfb591a3
KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
|
|
KMSAN: uninit-value in em_ret_far
kvm-x86
|
7 |
syz, C |
|
|
37 |
933d |
999d
|
25/29 |
906d |
6fd1e3963f20
KVM: x86: Clean up partially uninitialized integer in emulate_pop()
|
|
WARNING in kvm_arch_vcpu_ioctl_run (5)
kvm-x86
|
-1 |
syz, C |
error |
|
343 |
1122d |
1210d
|
23/29 |
1088d |
26a0652cb453
KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
|
|
WARNING in kvm_arch_vcpu_ioctl_run (4)
kvm-x86
|
-1 |
syz, C |
error |
|
288 |
1215d |
1298d
|
22/29 |
1214d |
0dc902267cb3
KVM: x86: Suppress pending MMIO write exits if emulator detects exception
|
|
KMSAN: uninit-value in kvm_irq_delivery_to_apic_fast
kvm-x86
|
7 |
syz, C |
|
|
20 |
1526d |
1559d
|
22/29 |
1318d |
8a414f943f8b
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
|
|
WARNING in vcpu_enter_guest (2)
kvm-x86
|
-1 |
syz, C |
|
|
42 |
1431d |
1440d
|
22/29 |
1318d |
dea0d5a2fde6
KVM: x86: Exempt pending triple fault from event injection sanity check
|
|
BUG: unable to handle kernel paging request in vmx_handle_exit_irqoff
kvm-x86
|
8 |
syz, C |
error |
|
7736 |
1410d |
1432d
|
22/29 |
1318d |
1cfaac2400c7
x86/kasan: Populate shadow for shared chunk of the CPU entry area
|
|
WARNING in vmx_queue_exception (2)
kvm-x86
|
-1 |
syz, C |
|
|
5 |
1617d |
1616d
|
22/29 |
1318d |
053d2290c030
KVM: VMX: Exit to userspace if vCPU has injected exception and invalid state
|
|
BUG: unable to handle kernel paging request in kvm_arch_hardware_enable
kvm-x86
|
8 |
syz, C |
error |
|
28 |
1506d |
1510d
|
22/29 |
1318d |
4ba4f4194274
KVM: Properly unwind VM creation if creating debugfs fails
|
|
WARNING: ODEBUG bug in kvm_xen_vcpu_set_attr
kvm
kvm-x86
io-uring
|
-1 |
syz, C |
done |
|
4 |
1526d |
1578d
|
22/29 |
1318d |
af735db31285
KVM: x86/xen: Initialize Xen timer only once
c03689913635
KVM: x86/xen: Stop Xen timer before changing IRQ
|
|
WARNING in free_loaded_vmcs (3)
kvm-x86
|
-1 |
syz, C |
inconclusive |
|
2 |
1714d |
1714d
|
22/29 |
1318d |
f7e570780efc
KVM: x86: Forcibly leave nested virt when SMM state is toggled
|
|
WARNING in kvm_arch_vcpu_ioctl_run (3)
kvm-x86
|
-1 |
syz, C |
done |
error |
16157 |
1319d |
3112d
|
22/29 |
1318d |
ec6e4d863258
KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
|
|
memory leak in kvm_vcpu_ioctl_set_cpuid2
kvm-x86
|
3 |
syz, C |
|
|
1 |
1716d |
1712d
|
22/29 |
1318d |
811f95ff9527
KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
|
|
general protection fault in kvm_arch_vcpu_ioctl
kvm-x86
|
2 |
syz, C |
inconclusive |
|
365 |
1519d |
1556d
|
22/29 |
1318d |
f83894b24c2a
KVM: x86: Fix handling of APIC LVT updates when userspace changes MCG_CAP
|
|
possible deadlock in scheduler_tick
kvm-x86
|
4 |
syz, C |
error |
|
99 |
2008d |
2020d
|
20/29 |
1663d |
a83829f56c7c
KVM: x86: disable interrupts while pvclock_gtod_sync_lock is taken
8228c77d8b56
KVM: x86: switch pvclock_gtod_sync_lock to a raw spinlock
|
|
general protection fault in rcu_segcblist_enqueue
kvm-x86
|
2 |
syz, C |
done |
done |
368 |
1854d |
1918d
|
20/29 |
1671d |
eb7511bf9182
KVM: x86: Handle SRCU initialization failure during page track init
|
|
WARNING in nested_vmx_vmexit
kvm-x86
|
-1 |
syz, C |
done |
|
101 |
1747d |
1764d
|
20/29 |
1671d |
a80dfc025924
KVM: VMX: Always clear vmx->fail on emulation_required
|
|
BUG: spinlock bad magic in synchronize_srcu
kvm-x86
|
4 |
syz, C |
done |
done |
3254 |
1833d |
2203d
|
20/29 |
1671d |
eb7511bf9182
KVM: x86: Handle SRCU initialization failure during page track init
|
|
KMSAN: uninit-value in kvm_cpuid
kvm-x86
|
7 |
syz, C |
|
|
22 |
1805d |
1829d
|
20/29 |
1671d |
e8a747d0884e
KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
|
|
WARNING in exception_type
kvm-x86
|
-1 |
syz, C |
error |
|
1 |
1862d |
1861d
|
20/29 |
1790d |
e7177339d7b5
Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
|
|
WARNING in x86_emulate_instruction
kvm-x86
|
-1 |
syz, C |
done |
|
4 |
1965d |
1962d
|
20/29 |
1790d |
da6393cdd8aa
KVM: X86: Fix warning caused by stale emulation context
|
|
general protection fault in gfn_to_rmap (2)
kvm-x86
|
2 |
syz, C |
done |
|
1 |
1945d |
1944d
|
20/29 |
1790d |
78fcb2c91adf
KVM: x86: Immediately reset the MMU context when the SMM flag is cleared
|
|
general protection fault in kvm_hv_irq_routing_update
kvm
kvm-x86
|
2 |
syz, C |
done |
|
33 |
2040d |
2046d
|
20/29 |
2004d |
919f4ebc5987
KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref
|
|
BUG: unable to handle kernel paging request in __kvm_mmu_prepare_zap_page
kvm-x86
|
8 |
syz |
error |
|
2 |
2767d |
2778d
|
20/29 |
2025d |
47c42e6b4192
KVM: x86: fix handling of role.cr4_pae and rename it to 'gpte_size'
|
|
UBSAN: shift-out-of-bounds in intel_pmu_refresh
kvm-x86
|
-1 |
syz, C |
unreliable |
|
1237 |
2076d |
2125d
|
19/29 |
2035d |
e61ab2a320c3
KVM: x86/pmu: Fix UBSAN shift-out-of-bounds warning in intel_pmu_refresh()
|
|
WARNING in handle_exception_nmi
kvm-x86
|
-1 |
syz, C |
error |
done |
2653 |
2189d |
2194d
|
15/29 |
2148d |
f8e48a3dca06
lockdep: Fix preemption WARN for spurious IRQ-enable
|
|
BUG: unable to handle kernel paging request in pvclock_gtod_notify
kvm-x86
|
8 |
syz, C |
done |
done |
8 |
2194d |
2213d
|
15/29 |
2148d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
BUG: unable to handle kernel paging request in vmx_vcpu_run
kvm-x86
|
8 |
syz, C |
error |
error |
194 |
2984d |
3098d
|
15/29 |
2205d |
0447378a4a79
kvm: vmx: Nested VM-entry prereqs for event inj.
|
|
general protection fault in __apic_accept_irq (2)
kvm-x86
|
2 |
syz, C |
done |
|
9 |
2292d |
2288d
|
15/29 |
2256d |
9d3c447c72fb
KVM: X86: Fix async pf caused null-ptr-deref
|
|
WARNING in kvm_inject_emulated_page_fault
kvm-x86
|
-1 |
syz, C |
done |
|
20 |
2294d |
2313d
|
15/29 |
2270d |
7a35e515a705
KVM: VMX: Properly handle kvm_read/write_guest_virt*() result
|
|
kernel BUG at arch/x86/kvm/mmu/mmu.c:LINE! (2)
kvm-x86
|
-1 |
syz, C |
done |
|
46328 |
2291d |
2322d
|
15/29 |
2270d |
7d2e8748af62
KVM: x86: Initialize tdp_level during vCPU creation
|
|
BUG: unable to handle kernel NULL pointer dereference in handle_external_interrupt_irqoff
kvm-x86
|
10 |
syz, C |
done |
|
6404 |
2383d |
2387d
|
15/29 |
2338d |
428b8f1d9f92
KVM: VMX: don't allow memory operands for inline asm that modifies SP
|
|
WARNING in vcpu_enter_guest
kvm-x86
|
-1 |
syz |
done |
|
19 |
2388d |
2501d
|
15/29 |
2338d |
d33294541889
KVM: x86: remove bogus user-triggerable WARN_ON
|
|
kernel BUG at arch/x86/kvm/mmu/mmu.c:LINE!
kvm-x86
|
-1 |
syz, C |
done |
|
6 |
2476d |
2484d
|
15/29 |
2420d |
005ba37cb89b
mm: thp: KVM: Explicitly check for THP when populating secondary MMU
|
|
KASAN: vmalloc-out-of-bounds Write in kvm_dev_ioctl_get_cpuid
kvm-x86
|
21 |
syz, C |
|
|
41 |
2496d |
2497d
|
15/29 |
2462d |
433f4ba19041
KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332)
|
|
KASAN: use-after-free Read in __schedule (2)
kvm-x86
|
19 |
syz, C |
|
done |
961 |
2767d |
2985d
|
13/29 |
2510d |
26b471c7e2f7
KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
|
|
WARNING in handle_desc
kvm-x86
|
-1 |
syz, C |
done |
|
6 |
2572d |
2580d
|
13/29 |
2546d |
3ca94192278c
KVM: X86: Fix userspace set invalid CR4
|
|
WARNING in kvm_set_tsc_khz
kvm-x86
|
-1 |
syz, C |
|
|
5 |
2979d |
2976d
|
12/29 |
2624d |
3f16a5c31839
KVM: x86: degrade WARN to pr_warn_ratelimited
|
|
general protection fault in vcpu_enter_guest (2)
kvm-x86
|
2 |
syz, C |
done |
|
11286 |
2713d |
2719d
|
12/29 |
2687d |
b904cb8dff82
KVM: lapic: Check for in-kernel LAPIC before deferencing apic pointer
|
|
WARNING in free_loaded_vmcs (2)
kvm-x86
|
-1 |
syz |
done |
|
5 |
2952d |
2973d
|
11/29 |
2742d |
5bea5123cbf0
KVM: VMX: check nested state and CR4.VMXE against SMM
|
|
general protection fault in kvm_lapic_hv_timer_in_use
kvm-x86
|
2 |
syz |
done |
|
205 |
2934d |
2976d
|
11/29 |
2742d |
26b471c7e2f7
KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
|
|
WARNING in enter_vmx_operation
kvm-x86
|
-1 |
syz |
done |
|
8 |
2945d |
2957d
|
11/29 |
2742d |
5bea5123cbf0
KVM: VMX: check nested state and CR4.VMXE against SMM
|
|
KMSAN: kernel-infoleak in vmx_get_nested_state
kvm-x86
|
9 |
syz, C |
|
|
6 |
2770d |
2881d
|
11/29 |
2769d |
3a33d030daaa
kvm: x86/vmx: Use kzalloc for cached_vmcs12
|
|
general protection fault in kvm_ioapic_scan_entry
kvm-x86
|
2 |
syz, C |
|
|
148 |
2864d |
2973d
|
11/29 |
2776d |
dcbd3e49c2f0
KVM: X86: Fix NULL deref in vcpu_scan_ioapic
|
|
general protection fault in kvm_arch_vcpu_ioctl_run
kvm-x86
|
2 |
syz, C |
|
|
12 |
2846d |
2861d
|
11/29 |
2824d |
dcbd3e49c2f0
KVM: X86: Fix NULL deref in vcpu_scan_ioapic
|
|
KMSAN: kernel-infoleak in kvm_arch_vcpu_ioctl
kvm-x86
|
9 |
syz, C |
|
|
31 |
2864d |
2879d
|
11/29 |
2858d |
7f9ad1dfa3c7
KVM: nVMX: Fix kernel info-leak when enabling KVM_CAP_HYPERV_ENLIGHTENED_VMCS more than once
|
|
general protection fault in __radix_tree_delete
kvm
kvm-x86
|
2 |
syz, C |
|
|
38 |
3054d |
3080d
|
5/29 |
3041d |
7a4deea1aa8b
idr: fix invalid ptr dereference on item delete
|
|
WARNING in __mutex_unlock_slowpath
kvm
kvm-x86
|
-1 |
syz, C |
|
|
2 |
3077d |
3080d
|
5/29 |
3041d |
7a4deea1aa8b
idr: fix invalid ptr dereference on item delete
|
|
general protection fault in native_write_cr4
kvm-x86
|
2 |
syz, C |
|
|
132300 |
3106d |
3210d
|
5/29 |
3103d |
8eb3f87d9031
KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit
|
|
WARNING in kvm_arch_vcpu_ioctl_run (2)
kvm-x86
|
-1 |
syz, C |
|
|
61018 |
3170d |
3259d
|
4/29 |
3127d |
c37c28730bb0
KVM: VMX: Fix rflags cache during vCPU reset
|
|
WARNING in handle_ept_misconfig
kvm-x86
|
-1 |
syz, C |
|
|
238 |
3142d |
3265d
|
4/29 |
3134d |
95e057e25892
KVM: X86: Fix SMRAM accessing even if VM is shutdown
|
|
WARNING in __x86_set_memory_region
kvm-x86
|
-1 |
syz, C |
|
|
716 |
3142d |
3260d
|
4/29 |
3134d |
103c763c72dd
KVM/x86: remove WARN_ON() for when vm_munmap() fails
|
|
kernel BUG at arch/x86/kvm/mmu.c:LINE!
kvm-x86
|
-1 |
syz, C |
|
|
695 |
3142d |
3259d
|
4/29 |
3134d |
b28676bb8ae4
KVM: mmu: Fix overlap between public and private memslots
|
|
KASAN: use-after-free Read in __schedule
kvm-x86
|
19 |
syz, C |
|
|
145 |
3209d |
3210d
|
4/29 |
3154d |
8dbfb2bf1bb3
KVM: x86: don't forget vcpu_put() in kvm_arch_vcpu_ioctl_set_sregs()
|
|
KASAN: stack-out-of-bounds Read in write_mmio
kvm-x86
|
17 |
syz, C |
|
|
3 |
3219d |
3229d
|
4/29 |
3172d |
e39d200fa5bf
KVM: Fix stack-out-of-bounds read in write_mmio
|
|
WARNING in free_loaded_vmcs
kvm-x86
|
-1 |
syz, C |
|
|
170 |
3232d |
3239d
|
4/29 |
3174d |
b74558259c51
KVM: VMX: Fix vmx->nested freeing when no SMI handler
|