Linux Kernel KVM SVM Out-of-Bounds Guest IRQ Handling Vulnerability Leading to Panic

A vulnerability in the Linux kernel's KVM (Kernel-based Virtual Machine) SVM (Secure Virtual Machine) module has been identified, where improper handling of guest IRQs (interrupt requests) can lead to a kernel panic. This issue arises from the KVM_IRQFD API, which, when mismanaged, causes a crash in the 'svm_update_pi_irte' function due to out-of-bounds access. The problem has been addressed by modifying the IRQ handling to prevent such crashes.

Impact

Exploitation of this vulnerability causes a kernel panic, leading to a crash of the affected virtual machine.