linux-kernel - 4.6 security problem with KVM?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20160705151224.0041da3d@tomh>
Date:	Tue, 5 Jul 2016 15:12:24 -0400
From:	Tom Horsley <horsley1953@...il.com>
To:	linux-kernel@...r.kernel.org
Subject: 4.6 security problem with KVM?

I submitted this fedora bugzilla recently:

https://bugzilla.redhat.com/show_bug.cgi?id=1352325

Among other things, it shows a Windows 10 KVM virtual machine
causing strange side effects back on the fedora 24 host, which
sure seems like the sort of thing that might be a security issue.

After reading all about how 4.6 is the most secure linux release
ever, yet having this bug crop up only on the 4.6 kernel,
I just thought I'd ask if it seems like a potential security
problem to anyone else?

(Plus if it really is a security issue, maybe I'll get dozens
of experts jumping on it to fix it :-).