VOMIT (go/vomit) has received an external vulnerability report for the Linux kernel.
Advisory: CVE-2017-12168
Details: http://vomit.googleplex.com/advisory?id=CVE/CVE-2017-12168
CVSS severity score: 4.9/10.0
Description:
The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service (assertion failure and host OS crash) by accessing the Performance Monitors Cycle Count Register (PMCCNTR).
This bug was filed by http://go/vomit
Please contact us at vomit-team@google.com if you need any assistance.
Comment 1 by groeck@chromium.org
, Sep 23 2017Owner: groeck@chromium.org
Status: WontFix (was: Untriaged)
Upstream 9e3f7a2969404 ("arm64: KVM: pmu: Fix AArch32 cycle counter access"). Only affects kernels from 4.6 to 4.8.