KVM: fixes for CVE-2026-46113 and related issues
Subsystems (2)
Quoted 9 lines
Sasha, Greg,
this is the backport to 5.15 for the above CVE. The fix was relatively simple upstream but only due to years of refactoring and cleaning up of the code; fixing from scratch is not really feasible so start by applying the patches that are needed.
Please apply this instead of v1, due to a missing line in the last patch. Sorry about that.
Sorry for the noise, has this series stuck?
Paolo Bonzini
maintainerIl gio 23 lug 2026, 08:36 Sergey Senozhatsky
<[email protected]> ha scritto:
Quoted 8 lines
Quoted 8 lines
Sasha, Greg,
this is the backport to 5.15 for the above CVE. The fix was relatively simple upstream but only due to years of refactoring and cleaning up of the code; fixing from scratch is not really feasible so start by applying the patches that are needed.
Quoted 4 lines
Quoted 2 lines
Please apply this instead of v1, due to a missing line in the last patch. Sorry about that.
Sorry for the noise, has this series stuck?
It had a regression and while there was a suggestion about how to fix it, nobody had time to verify it.
(https://lore.kernel.org/kvm/[email protected]/)
Stable releases, especially the older ones, are best effort. If you want them to be free of these vulnerabilities, please contribute to that effort with backports and tests.
Paolo
Hello,
Quoted 10 lines · Paolo Bonzini
Il gio 23 lug 2026, 08:36 Sergey Senozhatsky
<[email protected]> ha scritto:Quoted 8 lines
Quoted 8 lines
Sasha, Greg,
this is the backport to 5.15 for the above CVE. The fix was relatively simple upstream but only due to years of refactoring and cleaning up of the code; fixing from scratch is not really feasible so start by applying the patches that are needed.
Quoted 8 lines
Quoted 4 lines
Quoted 2 lines
Please apply this instead of v1, due to a missing line in the last patch. Sorry about that.
Sorry for the noise, has this series stuck?
It had a regression and while there was a suggestion about how to fix it, nobody had time to verify it.
(https://lore.kernel.org/kvm/[email protected]/)
I guess I can try helping with that. Will require some time and help tho.
Quoted 6 lines · Sergey Senozhatsky
Quoted 3 lines
It had a regression and while there was a suggestion about how to fix it, nobody had time to verify it.
(https://lore.kernel.org/kvm/[email protected]/)I guess I can try helping with that. Will require some time and help tho.
Folks, sorry, I don't think I'll be able to help with this. For the time being, we use a different approach in 5.10.y and 5.15.y.