Re: [PATCH 5.15.y v2 0/8] KVM: fixes for CVE-2026-46113 and related issues

[Sergey Senozhatsky]

Hello,
sorry for the delay,

On (26/07/23 15:36), Paolo Bonzini wrote:
> > > Sorry, forgot to set proper In-Reply-To [1]
> > > 
> > > https://lore.kernel.org/stable/20260626174620.1819772-1-pbonzini@xxxxxxxxxx/
> > > 
> > 
> > It needs backports for newer kernels first, right?
> 
> Backports up to 6.1 are trivial, if anyone posts them I'll ack them in a
> second.

6.1, 6.6, 6.12 (and 7.x) already have

commit b1337aae5e194324e4810d561764e7793f8b3864
Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
Date:   Fri Jun 26 13:24:36 2026 +0200

    KVM: x86: Fix shadow paging use-after-free due to unexpected role

commit e9d4ea13aa2b6400bb10ec64b370ba3dadcd22f0
Author: Sean Christopherson <seanjc@xxxxxxxxxx>
Date:   Tue May 5 09:08:12 2026 +0200

    KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

I suppose these patches are enough to address the vulnerability?


I can take a look at 5.10 and 5.15 backports but I likely will need
some help.