Threats tagged 'ghsa-j7wr-633c-vhmr'

CVE-2024-40953 addresses a data race vulnerability in the Linux kernel's KVM module related to the last_boosted_vcpu variable accessed in kvm_vcpu_on_spin(). The issue arises from non-atomic loads and stores potentially causing out-of-bounds vCPU indexing in rare compiler tearing scenarios. This flaw was detected by KCSAN and could lead to kernel instability or crashes. The vulnerability has a medium severity score and does not impact confidentiality or integrity but affects availability.