In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
Advertise support for Hyper-V's SEND_IPI and SEND_IPI_EX hypercalls if and only if the local API is emulated/virtualized by KVM, and explicitly reject said hypercalls if the local APIC is emulated in userspace, i.e. don't rely on userspace to opt-in to KVM_CAP_HYPERV_ENFORCE_CPUID.
Rejecting SEND_IPI and SEND_IPI_EX fixes a NULL-pointer dereference if Hyper-V enlightenments are exposed to the guest without an in-kernel local APIC:
dump_stack+0xbe/0xfd __kasan_report.cold+0x34/0x84 kasan_report+0x3a/0x50 __apic_accept_irq+0x3a/0x5c0 kvm_hv_send_ipi.isra.0+0x34e/0x820 kvm_hv_hypercall+0x8d9/0x9d0 kvm_emulate_hypercall+0x506/0x7e0 __vmx_handle_exit+0x283/0xb60 vmx_handle_exit+0x1d/0xd0 vcpu_enter_guest+0x16b0/0x24c0 vcpu_run+0xc0/0x550 kvm_arch_vcpu_ioctl_run+0x170/0x6d0 kvm_vcpu_ioctl+0x413/0xb20 __se_sys_ioctl+0x111/0x160 do_syscal1_64+0x30/0x40 entry_SYSCALL_64_after_hwframe+0x67/0xd1
Note, checking the sending vCPU is sufficient, as the per-VM irqchip_mode can't be modified after vCPUs are created, i.e. if one vCPU has an in-kernel local APIC, then all vCPUs have an in-kernel local APIC.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.236-227.928Upgrade kernel-develUpgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-toolsUpgrade perf-debuginfo | Apr 30, 2025 | Feb 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.129-138.220Upgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade bpftool | May 14, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 17, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | Jun 13, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jun 11, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jul 1, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kernel-azure-extraUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-docsUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade dtb-amazonUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-azureUpgrade dtb-lgUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-symsUpgrade dtb-xilinxUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-develUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade dtb-armUpgrade ocfs2-kmp-rt | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-6.8Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibmUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-gke-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-140-genericUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-azureUpgrade linux-image-aws-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-intelUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-aws-64kUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1035-awsUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracleUpgrade linux-image-raspi-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-78-generic | May 20, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub