In the Linux kernel, the following vulnerability has been resolved:
x86/mtrr: Check if fixed MTRRs exist before saving them
MTRRs have an obsolete fixed variant for fine grained caching control of the 640K-1MB region that uses separate MSRs. This fixed variant has a separate capability bit in the MTRR capability MSR.
So far all x86 CPUs which support MTRR have this separate bit set, so it went unnoticed that mtrr_save_state() does not check the capability bit before accessing the fixed MTRR MSRs.
Though on a CPU that does not support the fixed MTRR capability this results in a #GP. The #GP itself is harmless because the RDMSR fault is handled gracefully, but results in a WARN_ON().
Add the missing capability check to prevent this.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-4.14.353-270.569Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.224-212.876Upgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.165-110.161 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.106-116.188Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade perfUpgrade kernel-modules-extraUpgrade python3-perf | Oct 16, 2025 | Sep 4, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 6, 2024 | Sep 4, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Nov 11, 2024 | Sep 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelists | Dec 12, 2024 | Sep 4, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Dec 12, 2024 | Sep 4, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Nov 11, 2024 | Sep 4, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Sep 4, 2024 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-default-manUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade dtb-amdUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-rt-livepatch-develUpgrade dtb-xilinxUpgrade kernel-rtUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade dtb-appleUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade dtb-caviumUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-raspi2Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1044-iotUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-oemUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-azureUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-22.04 | Nov 4, 2024 | Sep 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub