Linux Kernel KVM Xen Timer Initialization Vulnerability Causes ODEBUG Crash

A vulnerability in the Linux kernel's KVM (Kernel-based Virtual Machine) component for Xen virtualization has been addressed. The issue arose because the Xen timer was being initialized multiple times without checking if it was already set, leading to an ODEBUG crash. This crash occurred when the virtual CPU's Xen timer was already active, causing a debug object initialization error. The vulnerability was introduced because the timer initialization function was called every time a specific KVM attribute was set, without verifying the timer's previous state.

Impact

The vulnerability could lead to a crash of the virtual CPU due to a double initialization of the Xen timer, causing a debug object error.