An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED situations.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-64k-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-coreUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-64k-develUpgrade kernel-modules-extraUpgrade rtlaUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-64kUpgrade kernel-64k-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernelUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debug-core | May 15, 2023 | Sep 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.69-37.134Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64 | Oct 14, 2022 | Sep 2, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | May 30, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | Sep 2, 2022 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Sep 2, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Dec 22, 2022 | Sep 2, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Jan 6, 2023 | Sep 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Nov 15, 2022 | Sep 2, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 12, 2023 | May 30, 2022 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2023 | Sep 2, 2022 |
| Suse | — | Upgrade kernel-symsUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade dtb-socionextUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-preempt-optionalUpgrade gfs2-kmp-preemptUpgrade kselftests-kmp-preemptUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade kernel-debugUpgrade dtb-amdUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade kernel-obs-qaUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade kernel-preempt-extraUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-preemptUpgrade kernel-source-azureUpgrade dtb-amazonUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade dtb-alUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade dtb-lgUpgrade dlm-kmp-preemptUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-develUpgrade kernel-preemptUpgrade kernel-preempt-develUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-preemptUpgrade dtb-zteUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-azure | Oct 26, 2022 | Sep 2, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-50-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1019-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1016-raspi-nolpaeUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-5.15.0-1017-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-5.15.0-50-lowlatency-64kUpgrade linux-image-5.15.0-1019-kvmUpgrade linux-image-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-50-generic-lpaeUpgrade linux-image-5.15.0-1016-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1019-gcpUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1004-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-50-genericUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1021-awsUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1021-azureUpgrade linux-image-5.15.0-1017-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-50-generic-64kUpgrade linux-image-generic-64k-hwe-22.04 | Oct 11, 2022 | Sep 2, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 2, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub