CVE-2021-47110

x86/kvm: Disable kvmclock on all CPUs on shutdown

published March 15, 2024

CVSS
—
EPSS
0%
Percentile
14.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

x86/kvm: Disable kvmclock on all CPUs on shutdown

Currenly, we disable kvmclock from machine_shutdown() hook and this

only happens for boot CPU. We need to disable it for all CPUs to

guard against memory corruption e.g. on restore from hibernate.

Note, writing '0' to kvmclock MSR doesn't clear memory location, it

just prevents hypervisor from updating the location so for the short

while after write and while CPU is still alive, the clock remains usable

and correct so we don't need to switch to some other clocksource.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00243 · 14.6th percentile
Published
2024-03-15T20:14Z
EPSS history
Timeline
  • 15 MAR 20:14Z
    x86/kvm: Disable kvmclock on all CPUs on shutdown
    cvelistv5