A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.73-48.135Upgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.147-133.644Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade bpftool | Oct 26, 2022 | Aug 26, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfo | Feb 17, 2025 | Apr 21, 2022 |
| Debian | — | Upgrade linux | Nov 1, 2022 | Aug 26, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Aug 2, 2022 | Jul 14, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 26, 2022 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-azure | Jun 13, 2023 | Aug 26, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1030-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-57-generic-lpaeUpgrade linux-image-5.15.0-1022-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1030-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-57-generic-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-1027-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1025-kvmUpgrade linux-image-5.15.0-1022-raspi-nolpaeUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-5.15.0-1022-raspiUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1024-gkeUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1026-gcpUpgrade linux-image-virtualUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-57-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1026-oracleUpgrade linux-image-5.15.0-57-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-57-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1012-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop | Jan 7, 2023 | Aug 26, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 26, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub