|
KASAN: use-after-free Read in kvm_setup_guest_pvclock
prio:normal
kvm-x86
|
19 |
syz, C |
|
|
5 |
42d |
73d
|
1/29 |
never |
KVM: pfncache: use a dedicated invalidation sequence for cache refresh
|
|
KASAN: use-after-free Read in kvm_xen_shared_info_init
prio:high
kvm
kvm-x86
|
19 |
syz, C |
|
|
11 |
4d01h |
114d
|
1/29 |
never |
KVM: pfncache: use a dedicated invalidation sequence for cache refresh
|
|
WARNING: kmalloc bug in memslot_rmap_alloc
kvm-x86
|
-1 |
syz, C |
unreliable |
|
3 |
1801d |
1830d
|
1/29 |
never |
KVM: replace large kvmalloc allocation with vmalloc
|
|
WARNING in hv_tlb_flush_enqueue
prio:high
kvm-x86
|
-1 |
syz, C |
|
|
2 |
80d |
79d
|
24/29 |
never |
c84d86130f24
KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses
|
|
WARNING in vcpu_run (2)
prio:high
kvm-x86
|
-1 |
syz, C |
error |
|
5 |
52d |
82d
|
24/29 |
never |
681fb81a4171
KVM: x86: Don't WARN if IRQ disappears because it was cleared from the PIC
|
|
INFO: rcu detected stall in kvm_vcpu_ioctl (4)
prio:high
kvm-x86
kvm
|
1 |
syz, C |
error |
|
8 |
34d |
257d
|
24/29 |
never |
0ca49fbd2883
KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
|
|
WARNING in vcpu_run
kvm-x86
|
-1 |
syz, C |
done |
|
43 |
239d |
684d
|
29/29 |
126d |
ead63640d4e7
KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()
|
|
WARNING in kvm_apic_accept_events (2)
kvm-x86
|
-1 |
syz, C |
|
|
72 |
214d |
288d
|
29/29 |
126d |
c4a365cd4a4e
KVM: x86: Drop WARN on INIT/SIPI being blocked when vCPU is in Wait-For-SIPI
|
|
WARNING in kvm_arch_vcpu_ioctl_run (6)
kvm-x86
|
-1 |
syz, C |
|
|
117 |
339d |
419d
|
29/29 |
315d |
e750f8539128
KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
|
|
WARNING in kvm_apic_accept_events
kvm-x86
|
-1 |
syz, C |
error |
done |
27 |
364d |
462d
|
29/29 |
330d |
0fe3e8d804fd
KVM: x86: Move INIT_RECEIVED vs. INIT/SIPI blocked check to KVM_RUN
|
|
possible deadlock in kvm_arch_pm_notifier
kvm-x86
|
4 |
|
|
|
2 |
584d |
611d
|
28/29 |
456d |
d9c5ed0a9b52
KVM: x86: Don't take kvm->lock when iterating over vCPUs in suspend notifier
|
|
WARNING in vmx_handle_exit (2)
kvm-x86
|
-1 |
syz, C |
|
|
3 |
558d |
638d
|
28/29 |
456d |
64c947a1cf35
KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM-Enter
|
|
general protection fault in is_page_fault_stale
kvm-x86
|
2 |
|
|
|
3 |
755d |
779d
|
28/29 |
688d |
28cec7f08b8b
KVM: x86/mmu: Check that root is valid/loaded when pre-faulting SPTEs
|
|
WARNING in vmx_handle_exit
kvm-x86
|
-1 |
syz, C |
error |
|
5 |
718d |
891d
|
28/29 |
688d |
3f6821aa147b
KVM: x86: Forcibly leave nested if RSM to L2 hits shutdown
|
|
WARNING in kvm_recalculate_apic_map
kvm-x86
|
-1 |
syz, C |
done |
|
23 |
758d |
794d
|
28/29 |
706d |
4b7c3f6d04bd
KVM: x86: Make x2APIC ID 100% readonly
|
|
WARNING in mmu_free_root_page
kvm-x86
|
-1 |
syz, C |
|
|
104 |
872d |
895d
|
25/29 |
840d |
1bc26cb90902
KVM: x86/mmu: Precisely invalidate MMU root_role during CPUID update
|
|
WARNING in clear_dirty_gfn_range
kvm-x86
|
-1 |
syz, C |
|
|
3 |
890d |
911d
|
25/29 |
840d |
2673dfb591a3
KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
|
|
KMSAN: uninit-value in em_ret_far
kvm-x86
|
7 |
syz, C |
|
|
37 |
909d |
974d
|
25/29 |
882d |
6fd1e3963f20
KVM: x86: Clean up partially uninitialized integer in emulate_pop()
|
|
KMSAN: uninit-value in em_ret_near_imm
kvm-x86
|
7 |
|
|
|
2 |
919d |
932d
|
25/29 |
882d |
6fd1e3963f20
KVM: x86: Clean up partially uninitialized integer in emulate_pop()
|
|
KMSAN: uninit-value in em_ret
kvm-x86
|
7 |
|
|
|
3 |
910d |
932d
|
25/29 |
882d |
6fd1e3963f20
KVM: x86: Clean up partially uninitialized integer in emulate_pop()
|
|
WARNING in kvm_arch_vcpu_ioctl_run (5)
kvm-x86
|
-1 |
syz, C |
error |
|
343 |
1098d |
1185d
|
23/29 |
1064d |
26a0652cb453
KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
|
|
KASAN: slab-use-after-free Read in kvm_tdp_mmu_invalidate_all_roots
kvm-x86
|
19 |
|
|
|
3 |
1236d |
1235d
|
22/29 |
1190d |
edbdb43fc96b
KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated
|
|
WARNING in kvm_tdp_mmu_invalidate_all_roots
kvm-x86
|
-1 |
|
|
|
1658 |
1234d |
1237d
|
22/29 |
1190d |
edbdb43fc96b
KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated
|
|
WARNING in kvm_arch_vcpu_ioctl_run (4)
kvm-x86
|
-1 |
syz, C |
error |
|
288 |
1190d |
1273d
|
22/29 |
1190d |
0dc902267cb3
KVM: x86: Suppress pending MMIO write exits if emulator detects exception
|
|
KMSAN: uninit-value in kvm_irq_delivery_to_apic_fast
kvm-x86
|
7 |
syz, C |
|
|
20 |
1501d |
1535d
|
22/29 |
1294d |
8a414f943f8b
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op()
|
|
WARNING in vcpu_enter_guest (2)
kvm-x86
|
-1 |
syz, C |
|
|
42 |
1406d |
1415d
|
22/29 |
1294d |
dea0d5a2fde6
KVM: x86: Exempt pending triple fault from event injection sanity check
|
|
BUG: unable to handle kernel paging request in vmx_handle_exit_irqoff
kvm-x86
|
8 |
syz, C |
error |
|
7736 |
1386d |
1407d
|
22/29 |
1294d |
1cfaac2400c7
x86/kasan: Populate shadow for shared chunk of the CPU entry area
|
|
WARNING in vmx_queue_exception (2)
kvm-x86
|
-1 |
syz, C |
|
|
5 |
1593d |
1592d
|
22/29 |
1294d |
053d2290c030
KVM: VMX: Exit to userspace if vCPU has injected exception and invalid state
|
|
BUG: unable to handle kernel paging request in kvm_arch_hardware_enable
kvm-x86
|
8 |
syz, C |
error |
|
28 |
1482d |
1486d
|
22/29 |
1294d |
4ba4f4194274
KVM: Properly unwind VM creation if creating debugfs fails
|
|
WARNING: ODEBUG bug in kvm_xen_vcpu_set_attr
kvm
kvm-x86
io-uring
|
-1 |
syz, C |
done |
|
4 |
1501d |
1554d
|
22/29 |
1294d |
af735db31285
KVM: x86/xen: Initialize Xen timer only once
c03689913635
KVM: x86/xen: Stop Xen timer before changing IRQ
|
|
WARNING in free_loaded_vmcs (3)
kvm-x86
|
-1 |
syz, C |
inconclusive |
|
2 |
1690d |
1689d
|
22/29 |
1294d |
f7e570780efc
KVM: x86: Forcibly leave nested virt when SMM state is toggled
|
|
WARNING in kvm_arch_vcpu_ioctl_run (3)
kvm-x86
|
-1 |
syz, C |
done |
error |
16157 |
1294d |
3088d
|
22/29 |
1294d |
ec6e4d863258
KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
|
|
memory leak in kvm_vcpu_ioctl_set_cpuid2
kvm-x86
|
3 |
syz, C |
|
|
1 |
1691d |
1687d
|
22/29 |
1294d |
811f95ff9527
KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}
|
|
general protection fault in kvm_arch_vcpu_ioctl
kvm-x86
|
2 |
syz, C |
inconclusive |
|
365 |
1494d |
1532d
|
22/29 |
1294d |
f83894b24c2a
KVM: x86: Fix handling of APIC LVT updates when userspace changes MCG_CAP
|
|
possible deadlock in scheduler_tick
kvm-x86
|
4 |
syz, C |
error |
|
99 |
1984d |
1996d
|
20/29 |
1638d |
a83829f56c7c
KVM: x86: disable interrupts while pvclock_gtod_sync_lock is taken
8228c77d8b56
KVM: x86: switch pvclock_gtod_sync_lock to a raw spinlock
|
|
general protection fault in rcu_segcblist_enqueue
kvm-x86
|
2 |
syz, C |
done |
done |
368 |
1829d |
1894d
|
20/29 |
1646d |
eb7511bf9182
KVM: x86: Handle SRCU initialization failure during page track init
|
|
WARNING in nested_vmx_vmexit
kvm-x86
|
-1 |
syz, C |
done |
|
101 |
1723d |
1740d
|
20/29 |
1646d |
a80dfc025924
KVM: VMX: Always clear vmx->fail on emulation_required
|
|
WARNING in vmx_queue_exception
kvm-x86
|
-1 |
|
|
|
8 |
1657d |
1719d
|
20/29 |
1646d |
fc4fad79fc3d
KVM: VMX: Reject KVM_RUN if emulation is required with pending exception
|
|
WARNING in kvm_mmu_uninit_tdp_mmu
kvm-x86
|
-1 |
|
|
|
3 |
1682d |
1765d
|
20/29 |
1646d |
3a0f64de479c
KVM: x86/mmu: Don't advance iterator after restart due to yielding
|
|
BUG: spinlock bad magic in synchronize_srcu
kvm-x86
|
4 |
syz, C |
done |
done |
3254 |
1808d |
2178d
|
20/29 |
1646d |
eb7511bf9182
KVM: x86: Handle SRCU initialization failure during page track init
|
|
KMSAN: uninit-value in kvm_cpuid
kvm-x86
|
7 |
syz, C |
|
|
22 |
1780d |
1805d
|
20/29 |
1646d |
e8a747d0884e
KVM: x86: Swap order of CPUID entry "index" vs. "significant flag" checks
|
|
WARNING in exception_type
kvm-x86
|
-1 |
syz, C |
error |
|
1 |
1837d |
1837d
|
20/29 |
1765d |
e7177339d7b5
Revert "KVM: x86: mmu: Add guest physical address check in translate_gpa()"
|
|
WARNING in x86_emulate_instruction
kvm-x86
|
-1 |
syz, C |
done |
|
4 |
1941d |
1937d
|
20/29 |
1765d |
da6393cdd8aa
KVM: X86: Fix warning caused by stale emulation context
|
|
general protection fault in gfn_to_rmap (2)
kvm-x86
|
2 |
syz, C |
done |
|
1 |
1920d |
1919d
|
20/29 |
1765d |
78fcb2c91adf
KVM: x86: Immediately reset the MMU context when the SMM flag is cleared
|
|
general protection fault in kvm_hv_irq_routing_update
kvm
kvm-x86
|
2 |
syz, C |
done |
|
33 |
2015d |
2022d
|
20/29 |
1979d |
919f4ebc5987
KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref
|
|
BUG: unable to handle kernel paging request in __kvm_mmu_prepare_zap_page
kvm-x86
|
8 |
syz |
error |
|
2 |
2743d |
2753d
|
20/29 |
2000d |
47c42e6b4192
KVM: x86: fix handling of role.cr4_pae and rename it to 'gpte_size'
|
|
UBSAN: shift-out-of-bounds in intel_pmu_refresh
kvm-x86
|
-1 |
syz, C |
unreliable |
|
1237 |
2051d |
2101d
|
19/29 |
2010d |
e61ab2a320c3
KVM: x86/pmu: Fix UBSAN shift-out-of-bounds warning in intel_pmu_refresh()
|
|
UBSAN: shift-out-of-bounds in kvm_vcpu_after_set_cpuid
kvm-x86
|
-1 |
|
|
|
2 |
2093d |
2088d
|
19/29 |
2010d |
2f80d502d627
KVM: x86: fix shift out of bounds reported by UBSAN
|
|
WARNING in handle_exception_nmi
kvm-x86
|
-1 |
syz, C |
error |
done |
2653 |
2165d |
2169d
|
15/29 |
2124d |
f8e48a3dca06
lockdep: Fix preemption WARN for spurious IRQ-enable
|
|
BUG: unable to handle kernel paging request in pvclock_gtod_notify
kvm-x86
|
8 |
syz, C |
done |
done |
8 |
2170d |
2189d
|
15/29 |
2124d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
BUG: unable to handle kernel paging request in vmx_vcpu_run
kvm-x86
|
8 |
syz, C |
error |
error |
194 |
2959d |
3074d
|
15/29 |
2181d |
0447378a4a79
kvm: vmx: Nested VM-entry prereqs for event inj.
|
|
general protection fault in __apic_accept_irq (2)
kvm-x86
|
2 |
syz, C |
done |
|
9 |
2268d |
2264d
|
15/29 |
2231d |
9d3c447c72fb
KVM: X86: Fix async pf caused null-ptr-deref
|
|
WARNING in kvm_inject_emulated_page_fault
kvm-x86
|
-1 |
syz, C |
done |
|
20 |
2269d |
2289d
|
15/29 |
2245d |
7a35e515a705
KVM: VMX: Properly handle kvm_read/write_guest_virt*() result
|
|
BUG: unable to handle kernel NULL pointer dereference in direct_page_fault
kvm-x86
|
10 |
|
|
|
1 |
2275d |
2271d
|
15/29 |
2245d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
BUG: unable to handle kernel NULL pointer dereference in try_async_pf
kvm-x86
|
10 |
|
|
|
1 |
2275d |
2271d
|
15/29 |
2245d |
3021e69219e2
kcov: check kcov_softirq in kcov_remote_stop()
|
|
kernel BUG at arch/x86/kvm/mmu/mmu.c:LINE! (2)
kvm-x86
|
-1 |
syz, C |
done |
|
46328 |
2266d |
2297d
|
15/29 |
2245d |
7d2e8748af62
KVM: x86: Initialize tdp_level during vCPU creation
|
|
BUG: unable to handle kernel NULL pointer dereference in handle_external_interrupt_irqoff
kvm-x86
|
10 |
syz, C |
done |
|
6404 |
2358d |
2363d
|
15/29 |
2314d |
428b8f1d9f92
KVM: VMX: don't allow memory operands for inline asm that modifies SP
|
|
WARNING in vcpu_enter_guest
kvm-x86
|
-1 |
syz |
done |
|
19 |
2363d |
2477d
|
15/29 |
2314d |
d33294541889
KVM: x86: remove bogus user-triggerable WARN_ON
|
|
kernel BUG at arch/x86/kvm/mmu/mmu.c:LINE!
kvm-x86
|
-1 |
syz, C |
done |
|
6 |
2452d |
2459d
|
15/29 |
2396d |
005ba37cb89b
mm: thp: KVM: Explicitly check for THP when populating secondary MMU
|
|
KASAN: vmalloc-out-of-bounds Write in kvm_dev_ioctl_get_cpuid
kvm-x86
|
21 |
syz, C |
|
|
41 |
2471d |
2472d
|
15/29 |
2437d |
433f4ba19041
KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332)
|
|
KASAN: use-after-free Read in __schedule (2)
kvm-x86
|
19 |
syz, C |
|
done |
961 |
2742d |
2961d
|
13/29 |
2485d |
26b471c7e2f7
KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
|
|
WARNING in handle_desc
kvm-x86
|
-1 |
syz, C |
done |
|
6 |
2547d |
2555d
|
13/29 |
2521d |
3ca94192278c
KVM: X86: Fix userspace set invalid CR4
|
|
WARNING in kvm_set_tsc_khz
kvm-x86
|
-1 |
syz, C |
|
|
5 |
2955d |
2951d
|
12/29 |
2600d |
3f16a5c31839
KVM: x86: degrade WARN to pr_warn_ratelimited
|
|
general protection fault in vcpu_enter_guest (2)
kvm-x86
|
2 |
syz, C |
done |
|
11286 |
2689d |
2694d
|
12/29 |
2663d |
b904cb8dff82
KVM: lapic: Check for in-kernel LAPIC before deferencing apic pointer
|
|
WARNING in free_loaded_vmcs (2)
kvm-x86
|
-1 |
syz |
done |
|
5 |
2927d |
2949d
|
11/29 |
2718d |
5bea5123cbf0
KVM: VMX: check nested state and CR4.VMXE against SMM
|
|
general protection fault in kvm_lapic_hv_timer_in_use
kvm-x86
|
2 |
syz |
done |
|
205 |
2910d |
2952d
|
11/29 |
2718d |
26b471c7e2f7
KVM: nVMX: Fix bad cleanup on error of get/set nested state IOCTLs
|
|
WARNING in enter_vmx_operation
kvm-x86
|
-1 |
syz |
done |
|
8 |
2921d |
2932d
|
11/29 |
2718d |
5bea5123cbf0
KVM: VMX: check nested state and CR4.VMXE against SMM
|
|
KMSAN: kernel-infoleak in vmx_get_nested_state
kvm-x86
|
9 |
syz, C |
|
|
6 |
2745d |
2857d
|
11/29 |
2745d |
3a33d030daaa
kvm: x86/vmx: Use kzalloc for cached_vmcs12
|
|
general protection fault in kvm_ioapic_scan_entry
kvm-x86
|
2 |
syz, C |
|
|
148 |
2839d |
2949d
|
11/29 |
2752d |
dcbd3e49c2f0
KVM: X86: Fix NULL deref in vcpu_scan_ioapic
|
|
general protection fault in kvm_arch_vcpu_ioctl_run
kvm-x86
|
2 |
syz, C |
|
|
12 |
2821d |
2837d
|
11/29 |
2799d |
dcbd3e49c2f0
KVM: X86: Fix NULL deref in vcpu_scan_ioapic
|
|
KMSAN: kernel-infoleak in kvm_arch_vcpu_ioctl
kvm-x86
|
9 |
syz, C |
|
|
31 |
2839d |
2854d
|
11/29 |
2834d |
7f9ad1dfa3c7
KVM: nVMX: Fix kernel info-leak when enabling KVM_CAP_HYPERV_ENLIGHTENED_VMCS more than once
|
|
general protection fault in __radix_tree_delete
kvm
kvm-x86
|
2 |
syz, C |
|
|
38 |
3029d |
3055d
|
5/29 |
3017d |
7a4deea1aa8b
idr: fix invalid ptr dereference on item delete
|
|
WARNING in __mutex_unlock_slowpath
kvm
kvm-x86
|
-1 |
syz, C |
|
|
2 |
3053d |
3055d
|
5/29 |
3017d |
7a4deea1aa8b
idr: fix invalid ptr dereference on item delete
|
|
INFO: task hung in do_vfs_ioctl
kvm-x86
|
1 |
|
|
|
2 |
3053d |
3070d
|
5/29 |
3038d |
8236b0ae31c8
bdi: wake up concurrent wb_shutdown() callers.
|
|
general protection fault in native_write_cr4
kvm-x86
|
2 |
syz, C |
|
|
132300 |
3081d |
3186d
|
5/29 |
3078d |
8eb3f87d9031
KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit
|
|
WARNING in kvm_arch_vcpu_ioctl_run (2)
kvm-x86
|
-1 |
syz, C |
|
|
61018 |
3146d |
3234d
|
4/29 |
3103d |
c37c28730bb0
KVM: VMX: Fix rflags cache during vCPU reset
|
|
WARNING in __x86_set_memory_region
kvm-x86
|
-1 |
syz, C |
|
|
716 |
3117d |
3236d
|
4/29 |
3110d |
103c763c72dd
KVM/x86: remove WARN_ON() for when vm_munmap() fails
|
|
WARNING in handle_ept_misconfig
kvm-x86
|
-1 |
syz, C |
|
|
238 |
3118d |
3240d
|
4/29 |
3110d |
95e057e25892
KVM: X86: Fix SMRAM accessing even if VM is shutdown
|
|
kernel BUG at arch/x86/kvm/mmu.c:LINE!
kvm-x86
|
-1 |
syz, C |
|
|
695 |
3117d |
3234d
|
4/29 |
3110d |
b28676bb8ae4
KVM: mmu: Fix overlap between public and private memslots
|
|
KASAN: use-after-free Read in __schedule
kvm-x86
|
19 |
syz, C |
|
|
145 |
3184d |
3185d
|
4/29 |
3129d |
8dbfb2bf1bb3
KVM: x86: don't forget vcpu_put() in kvm_arch_vcpu_ioctl_set_sregs()
|
|
KASAN: stack-out-of-bounds Read in write_mmio
kvm-x86
|
17 |
syz, C |
|
|
3 |
3194d |
3205d
|
4/29 |
3147d |
e39d200fa5bf
KVM: Fix stack-out-of-bounds read in write_mmio
|
|
WARNING in free_loaded_vmcs
kvm-x86
|
-1 |
syz, C |
|
|
170 |
3207d |
3215d
|
4/29 |
3150d |
b74558259c51
KVM: VMX: Fix vmx->nested freeing when no SMI handler
|
|
KASAN: double-free or invalid-free in kvm_arch_vcpu_uninit
kvm-x86
|
24 |
|
|
|
1 |
3166d |
3162d
|
3/29 |
3160d |
d76c68109f37
crypto: pcrypt - fix freeing pcrypt instances
|
|
BUG: unable to handle kernel paging request in kvm_arch_vcpu_ioctl_run
kvm-x86
|
8 |
|
|
|
1 |
3199d |
3195d
|
3/29 |
3172d |
7fb983b4dd56
x86/entry: Fix assumptions that the HW TSS is at the beginning of cpu_tss
|