An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade bpftoolUpgrade perfUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-debugUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdumpUpgrade kernel-doc | Nov 28, 2023 | Apr 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.176-157.645Upgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.348-265.562Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.104-63.140Upgrade python-perf | Jun 11, 2024 | Apr 10, 2023 |
| Amazon_linux | — | Upgrade kernel | Jun 24, 2024 | Apr 10, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.21-1.45Upgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf | Feb 17, 2025 | Apr 10, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Apr 10, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Apr 10, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jul 18, 2023 | Apr 10, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Jan 10, 2024 | Apr 10, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Jul 10, 2023 | Apr 10, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 9, 2023 | Apr 10, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 8, 2023 | Apr 10, 2023 |
| Suse | — | Upgrade kernel-rtUpgrade dlm-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-amdUpgrade kernel-defaultUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-rt-vdsoUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-broadcomUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kselftests-kmp-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-develUpgrade dtb-amazonUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade dtb-rockchipUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-nvidia | Jun 15, 2023 | Apr 10, 2023 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1157-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-73-generic-64kUpgrade linux-image-5.15.0-1037-awsUpgrade linux-image-4.4.0-241-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.4.0-1119-awsUpgrade linux-image-5.19.0-43-generic-64kUpgrade linux-image-3.13.0-197-lowlatencyUpgrade linux-image-3.13.0-197-genericUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1070-gkeopUpgrade linux-image-gke-5.4Upgrade linux-image-oracleUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.2.0-1005-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.19.0-1024-oracleUpgrade linux-image-5.15.0-73-lowlatencyUpgrade linux-image-5.4.0-1109-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-212-generic-lpaeUpgrade linux-image-5.17.0-1032-oemUpgrade linux-image-6.2.0-1003-ibmUpgrade linux-image-6.0.0-1017-oemUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.4.0-1157-awsUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1151-snapdragonUpgrade linux-image-5.19.0-1025-lowlatencyUpgrade linux-image-6.2.0-1006-raspi-nolpaeUpgrade linux-image-5.4.0-1103-awsUpgrade linux-image-5.15.0-1034-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.19.0-1024-kvmUpgrade linux-image-azureUpgrade linux-image-4.15.0-212-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1025-gcpUpgrade linux-image-serverUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-5.4.0-1100-gkeUpgrade linux-image-5.19.0-1023-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1141-kvmUpgrade linux-image-4.15.0-1166-azureUpgrade linux-image-5.15.0-1031-ibmUpgrade linux-image-5.19.0-1026-awsUpgrade linux-image-5.19.0-1027-azureUpgrade linux-image-5.4.0-1102-oracleUpgrade linux-image-5.15.0-1031-intel-iotgUpgrade linux-image-6.2.0-1005-oracleUpgrade linux-image-5.4.0-1086-raspiUpgrade linux-image-generic-lts-trustyUpgrade linux-image-oem-22.04cUpgrade linux-image-4.15.0-212-genericUpgrade linux-image-5.15.0-1036-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-150-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.2.0-1005-lowlatencyUpgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-73-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.2.0-23-genericUpgrade linux-image-5.19.0-1019-raspiUpgrade linux-image-4.15.0-1120-oracleUpgrade linux-image-5.15.0-1021-gkeopUpgrade linux-image-5.15.0-73-genericUpgrade linux-image-4.4.0-1120-kvmUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.2.0-23-generic-64kUpgrade linux-image-5.15.0-1039-azure-fdeUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1005-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1034-kvmUpgrade linux-image-6.2.0-1007-gcpUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-6.1.0-1009-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.19.0-1019-raspi-nolpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-241-genericUpgrade linux-image-5.19.0-43-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1050-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1039-azureUpgrade linux-image-6.2.0-23-generic-lpaeUpgrade linux-image-5.4.0-150-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-4.15.0-1151-gcpUpgrade linux-image-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1035-gcpUpgrade linux-image-5.15.0-1030-raspiUpgrade linux-image-5.4.0-150-genericUpgrade linux-image-5.19.0-1025-lowlatency-64kUpgrade linux-image-5.4.0-1106-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-73-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1092-kvmUpgrade linux-image-6.2.0-1005-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.19.0-43-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1030-raspi-nolpaeUpgrade linux-image-6.2.0-1006-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.2.0-1006-kvm | Apr 21, 2023 | Apr 10, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub