CVE-2024-53195

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Get rid of userspace_irqchip_in_use

Improper use of userspace_irqchip_in_use led to syzbot hitting the

following WARN_ON() in kvm_timer_update_irq():

WARNING: CPU: 0 PID: 3281 at arch/arm64/kvm/arch_timer.c:459

kvm_timer_update_irq+0x21c/0x394

Call trace:

kvm_timer_update_irq+0x21c/0x394 arch/arm64/kvm/arch_timer.c:459

kvm_timer_vcpu_reset+0x158/0x684 arch/arm64/kvm/arch_timer.c:968

kvm_reset_vcpu+0x3b4/0x560 arch/arm64/kvm/reset.c:264

kvm_vcpu_set_target arch/arm64/kvm/arm.c:1553 [inline]

kvm_arch_vcpu_ioctl_vcpu_init arch/arm64/kvm/arm.c:1573 [inline]

kvm_arch_vcpu_ioctl+0x112c/0x1b3c arch/arm64/kvm/arm.c:1695

kvm_vcpu_ioctl+0x4ec/0xf74 virt/kvm/kvm_main.c:4658

vfs_ioctl fs/ioctl.c:51 [inline]

__do_sys_ioctl fs/ioctl.c:907 [inline]

__se_sys_ioctl fs/ioctl.c:893 [inline]

__arm64_sys_ioctl+0x108/0x184 fs/ioctl.c:893

__invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]

invoke

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References