CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's KVM (Kernel-based Virtual Machine) component on arm64 architectures, specifically related to the handling of VNCR (Virtual Non-Canonical Register) page faults during guest aborts. If exploited, this could lead to improper memory access, potentially allowing a guest to read from a read-only mapping before writing, which may compromise system integrity. Organizations utilizing Linux with KVM on arm64 should prioritize addressing this issue to ensure the security and stability of their virtualized environments.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Re-translate VNCR before injecting abort KVM faults in the VNCR page with FOLL_WRITE whenever the guest aborts for a write, similar to how a regular stage-2 mapping is handled. It is entirely possible that the guest reads from the VNCR before writing to it, in which case the PFN could only be read-only. Invalidate the VNCR TLB and re-fetch the translation upon taking a VNCR abort, allowing the host mapping to be faulted in for write the second time around. Interestingly enough, this also satisfies the ordering requirements of FEAT_ETS2/3 between descriptor updates and MMU faults.