Threats tagged 'ghsa-7gvv-gph6-2hpj'

CVE-2024-53135 addresses multiple bugs in the Linux kernel's KVM Intel PT virtualization feature. The vulnerability involves improper handling of Intel Processor Trace (PT) virtualization in guest/host mode, leading to guest crashes and potential host instability. The kernel now disables this feature behind a CONFIG_BROKEN flag to prevent use unless explicitly enabled. The flaws include failure to disable tracing before VM entry, violating hardware requirements, and improper validation of guest CPUID configurations causing host errors and possible deadlocks.