CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's KVM component, specifically in the handling of TLB invalidation for arm64 architecture, where improper address rollover handling can lead to failed TLB invalidations. This flaw could potentially allow unauthorized access to memory, impacting system stability and security. Organizations utilizing Linux on arm64 systems, particularly those running virtualized environments, should prioritize addressing this issue to mitigate risks associated with memory management vulnerabilities.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly handle end of VA space TLBI invalidation Our TLB invalidation by VA code is based on comparing two ranges, one defined by the TLB, and one defined by the TLBI instruction. Each range is defined by a start and a size. However, the way the comparison is done doesn't account for address rollover, as it compares an address with (base + size). This works nicely until this expression represent the last page/block in the TTBR1 VA space, as the result is a big fat 0. And a failed TLB invalidation. Rewrite the comparison in a way that is immune to the address rollover (making the end address inclusive instead of exclusive), and move this into a common helper that is used by both VA and IPA invalidations, as suggested by Hyunwoo Kim (although the IPA version didn't suffer from this particular problem, obviously).