CVE-2024-47717

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.11-rc3

Description A NULL pointer crash is observed when SBI PMU snapshot is enabled for the guest and the guest is forcefully powered-off. The kvm vcpu write guest() function is crashing because it is being called from kvm pmu clear snapshot area() upon guest tear down. To address this issue, the kvm pmu clear snapshot area() function should be simplified to not zero-out PMU snapshot area because the guest is anyway being torn down.

Recommendations To resolve the issue, simplify the kvm pmu clear snapshot area() function to not zero-out PMU snapshot area from kvm pmu clear snapshot area() because the guest is anyway being torn down. As a temporary workaround, consider disabling the kvm pmu clear snapshot area() function until a patch is available.