Security tracker / CVE-2024-53196

CVE-2024-53196

KVM: arm64: Don't retire aborted MMIO instruction

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in da345174ceca ("KVM: arm/arm64: Allow user injection of external
 carnil> data aborts"). Vulnerable versions: 5.5-rc1.

Bugs

Status

Branch	Status
upstream	released (6.13-rc1) [e735a5da64420a86be370b216c269b5dd8e830e2]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	released (6.12.2) [d0571c3add987bcb69c2ffd7a70c998bf8ce60fb]
6.6-upstream-stable	released (6.6.66) [ea6b5d98fea4ee8cb443ea98fda520909e90d30e]
6.1-upstream-stable	released (6.1.120) [6af853cf5f897d55f42e9166f4db50e84e404fb3]
5.10-upstream-stable	needed
sid	released (6.12.3-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	released (6.1.123-1)
5.10-bullseye-security	needed