A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or applying the relevant stable backports (v5.4.233, v5.10.170, v5.15.96, v6.1.14).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rtlaUpgrade kernel-64k-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64kUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-coreUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-64k-develUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-devel-matchedUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matched | May 15, 2023 | Jan 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-tools-devel | Mar 22, 2023 | Jan 9, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade python3-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-livepatch-6.1.15-28.43Upgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-libbpf-devel | Feb 17, 2025 | Sep 28, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 15, 2023 | Jan 9, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Jan 9, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | May 8, 2023 | Jan 9, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 4, 2023 | Sep 28, 2022 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 15, 2023 | Jan 9, 2023 |
| Suse | — | Upgrade kernel-sourceUpgrade dtb-qcomUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade dtb-alUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-docsUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-64kbUpgrade kernel-preempt-develUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-obs-buildUpgrade kernel-debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-preemptUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-source-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-zteUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kb | May 10, 2023 | Jan 9, 2023 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1046-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-5.4.0-146-generic-lpaeUpgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1035-azureUpgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1105-azureUpgrade linux-image-5.4.0-146-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1033-awsUpgrade linux-image-5.4.0-1082-raspiUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1066-gkeopUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-5.19.0-1022-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-6.1.0-1008-oemUpgrade linux-image-gke-5.15Upgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1088-kvmUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-5.14.0-1059-oemUpgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-5.4.0-1099-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.19.0-1022-awsUpgrade linux-image-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-5.15.0-69-genericUpgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-5.19.0-38-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-5.17.0-1029-oemUpgrade linux-image-6.0.0-1013-oemUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1060-bluefieldUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-5.4.0-146-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1096-gkeUpgrade linux-image-5.4.0-1098-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1102-gcpUpgrade linux-image-5.4.0-1023-xilinx-zynqmpUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi | Apr 10, 2023 | Jan 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub