A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.43-20.123Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-livepatch-5.15.43-20.103Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python-perf-debuginfo | Jul 4, 2022 | Jul 4, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-tools | Feb 17, 2025 | Apr 7, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 8, 2023 | Aug 31, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Aug 31, 2022 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 22, 2024 | Apr 7, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 8, 2023 | Aug 31, 2022 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade dtb-apmUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-default-baseUpgrade dtb-armUpgrade dtb-appleUpgrade dtb-renesasUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade kernel-azureUpgrade dtb-allwinner | Oct 26, 2022 | Aug 31, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1008-gcpUpgrade linux-image-5.15.0-37-lowlatencyUpgrade linux-image-5.15.0-1007-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1011-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1011-raspiUpgrade linux-image-5.15.0-1008-gkeUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-5.15.0-1010-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1009-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1011-raspi-nolpaeUpgrade linux-image-5.15.0-37-generic-64kUpgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1008-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-5.15.0-37-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-5.15.0-37-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-37-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1010-azureUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-22.04 | Jun 9, 2022 | Jun 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub