A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This issue can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-core | Jun 6, 2024 | Jan 9, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.210-201.852Upgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-livepatch-5.15.149-99.161Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-debuginfo | Mar 6, 2024 | Jan 9, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-6.1.79-99.164Upgrade perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo | Feb 17, 2025 | May 22, 2023 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Mar 13, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Mar 13, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | May 31, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Apr 9, 2024 | Jan 9, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 9, 2024 | May 22, 2023 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jun 6, 2024 | Jan 9, 2024 |
| Rocky_linux | — | Upgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel | Jun 17, 2024 | Jan 9, 2024 |
| Suse | — | Upgrade dtb-marvellUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade kernel-64kbUpgrade kernel-preemptUpgrade kernel-azure-develUpgrade dtb-hisiliconUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-baseUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade dtb-appleUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-manUpgrade dtb-armUpgrade kernel-develUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-xilinxUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-debug-vdso | Feb 15, 2024 | Jan 9, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1080-bluefieldUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1053-oracleUpgrade linux-image-5.15.0-1050-intel-iotgUpgrade linux-image-5.4.0-173-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1046-nvidiaUpgrade linux-image-ibmUpgrade linux-image-5.15.0-100-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1048-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1048-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-100-generic-64kUpgrade linux-image-5.4.0-173-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1126-azureUpgrade linux-image-5.15.0-1038-gkeopUpgrade linux-image-intelUpgrade linux-image-5.15.0-1058-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-100-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1104-raspiUpgrade linux-image-5.15.0-1053-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1058-azure-fdeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-bluefieldUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1067-ibmUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-5.15.0-100-lowlatencyUpgrade linux-image-5.15.0-1052-gkeUpgrade linux-image-5.4.0-1032-iotUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-100-genericUpgrade linux-image-oemUpgrade linux-image-5.4.0-1120-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1119-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-173-genericUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1087-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1052-kvmUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1124-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1108-kvmUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1039-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1056-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-cvmUpgrade linux-image-kvm | Mar 7, 2024 | Jan 9, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub