In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Handle SRCU initialization failure during page track init
Check the return of init_srcu_struct(), which can fail due to OOM, when initializing the page track mechanism. Lack of checking leads to a NULL pointer deref found by a modified syzkaller.
[Move the call towards the beginning of kvm_arch_init_vm. - Paolo]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-livepatch-5.10.75-79.358Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfo | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-default-manUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade dtb-marvellUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade kernel-azure-vdsoUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade kernel-rt-livepatchUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade kernel-symsUpgrade kernel-azure-baseUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade dtb-caviumUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-livepatch-devel | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | No solution existsUpgrade linux-azure-fde-5.15 | Jun 26, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub