Към съдържанието
Търсене

CVE-2025-71104: Linux, отказ на услуга

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer When advancing the target expiration for the guest's APIC timer in periodic mode, set the expiration to "now" if the target expiration is in the past (similar to what is done in update_target_expiration()). Blindly adding the period to the previous target expiration can result in KVM generating a practically unbounded number of hrtimer IRQs due to programming an expired timer over and over. In extreme scenarios, e.g. if userspace pauses/suspends a VM for an extended duration, this can even cause hard lockups in the host. Currently, the bug only affects Intel CPUs when using the hypervisor timer (HV timer), a.k.a. the VMX preemption timer. Unlike the software timer, a.k.a. hrtimer, which KVM keeps running even on exits to userspace, the HV timer only runs while the guest is active. As a result, if the vCPU does not run for an extended duration, there will be a huge gap between the target expiration and the current time the vCPU resumes running. Because the target expiration is incremented by only one period on each timer expiration, this leads to a series of timer expirations occurring rapidly after the vCPU/VM resumes. More critically, when the vCPU first triggers a periodic HV timer expiration after resuming, advancing the expiration by only one period will result in a target expiration in the past. As a result, the delta may be calculated as a negative value. When the delta is converted into an absolute value (tscdeadline is an unsigned u64), the resulting value can overflow what the HV timer is capable of programming. I.e. the large value will exceed the VMX Preemption Timer's maximum bit width of cpu_preemption_timer_multi + 32, and thus cause KVM to switch from the HV timer to the software timer (hrtimers). After switching to the software timer, periodic timer expiration callbacks may be executed consecut

Засегнати продукти

  • Linux Linux: d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc преди 786ed625c125c5cd180d6aaa37e653e3e4ffb8d9; d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc преди d2da0df7bbc4fb4fd7d0a1da704f81a09c72fe73; d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc преди 807dbe8f3862fa7c164155857550ce94b36a11b9; d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc преди 7b54ccef865e0aa62e4871d4ada2ba4b9dcb8bed; d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc преди e746e51947053a02af2ea964593dc4887108d379; d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc преди e23f46f1a971c73dad2fd63e1408696114ddebe2; d8f2f498d9ed0c5010bc1bbc1146f94c8bf9f8cc преди 18ab3fc8e880791aa9f7c000261320fc812b5465; 421e1fadb0b0a648cc75afd5b3c826fa7daeaffc; 5a69b7b69beae9bb86e7e1b095685087976cba47; 4.14.45 преди 4.15; 4.16.13 преди 4.17
  • Linux Linux: 4.17; преди 4.17; 5.10.248 до 5.10.*; 5.15.198 до 5.15.*; 6.1.160 до 6.1.*; 6.6.120 до 6.6.*; 6.12.64 до 6.12.*; 6.18.3 до 6.18.*; от 6.19 нататък
  • Siemens: още 3 продукта, добавени от Siemens

    SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Вид слабост

История

  • 14 януари 2026 Публикувано

Други уязвимости в Linux Linux

Първоизточници

CVE-2025-71104: Linux, отказ на услуга | freedomonline.bg