Re: [PATCH 5.15.y v2 0/8] KVM: fixes for CVE-2026-46113 and related issues

[Paolo Bonzini]

Il gio 23 lug 2026, 08:36 Sergey Senozhatsky
<senozhatsky@xxxxxxxxxxxx> ha scritto:
>
> > Sasha, Greg,
> >
> > this is the backport to 5.15 for the above CVE.  The fix was relatively
> > simple upstream but only due to years of refactoring and cleaning up
> > of the code; fixing from scratch is not really feasible so start by
> > applying the patches that are needed.
> >
> > Please apply this instead of v1, due to a missing line in the last
> > patch.  Sorry about that.
>
> Sorry for the noise, has this series stuck?

It had a regression and while there was a suggestion about how to fix
it, nobody had time to verify it.
(https://lore.kernel.org/kvm/20260630223723.83727-1-zcgao@xxxxxxxxxx/)

Stable releases, especially the older ones, are best effort. If you
want them to be free of these vulnerabilities, please contribute to
that effort with backports and tests.

Paolo