A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service (host OS crash or host OS memory corruption) when nested virtualisation and the TDP MMU are enabled.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade rtlaUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-64k-coreUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debugUpgrade kernel-64k-modulesUpgrade kernelUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-64k-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64k-develUpgrade kernel-rt-coreUpgrade kernel-64kUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-rt | Aug 9, 2023 | Nov 30, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-develUpgrade kernel-tools-develUpgrade perf-debuginfo | Jan 24, 2023 | Nov 30, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perfUpgrade kernel-libbpfUpgrade perfUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel | Feb 17, 2025 | Nov 23, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 2, 2023 | Nov 30, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 30, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 14, 2023 | Nov 23, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 2, 2023 | Nov 30, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-kvm | Mar 5, 2024 | Nov 30, 2022 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-amdUpgrade kernel-azureUpgrade kernel-default-develUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-sprdUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade dtb-apmUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-rtUpgrade dlm-kmp-azure | Dec 19, 2022 | Nov 30, 2022 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1026-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.19.0-1019-kvmUpgrade linux-image-5.19.0-1018-gcpUpgrade linux-image-5.15.0-1025-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1030-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.19.0-35-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.19.0-1014-raspiUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1020-awsUpgrade linux-image-5.15.0-1025-raspiUpgrade linux-image-5.15.0-67-generic-64kUpgrade linux-image-5.19.0-1021-azureUpgrade linux-image-5.15.0-1031-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1029-kvmUpgrade linux-image-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-35-generic-lpaeUpgrade linux-image-5.15.0-1016-gkeopUpgrade linux-image-5.19.0-1018-ibmUpgrade linux-image-5.15.0-67-lowlatency-64kUpgrade linux-image-5.19.0-1014-raspi-nolpaeUpgrade linux-image-5.19.0-1018-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-67-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1028-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1030-gcpUpgrade linux-image-5.15.0-1034-azure-fdeUpgrade linux-image-5.15.0-67-genericUpgrade linux-image-5.15.0-1026-ibmUpgrade linux-image-5.19.0-1018-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.19.0-35-generic-64kUpgrade linux-image-5.15.0-67-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1034-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-1018-lowlatency-64k | Mar 22, 2023 | Nov 30, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub