In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v3-its: Avoid truncating memory addresses
On 32-bit machines with CONFIG_ARM_LPAE, it is possible for lowmem allocations to be backed by addresses physical memory above the 32-bit address limit, as found while experimenting with larger VMSPLIT configurations.
This caused the qemu virt model to crash in the GICv3 driver, which allocates the 'itt' object using GFP_KERNEL. Since all memory below the 4GB physical address limit is in ZONE_DMA in this configuration, kmalloc() defaults to higher addresses for ZONE_NORMAL, and the ITS driver stores the physical address in a 32-bit 'unsigned long' variable.
Change the itt_addr variable to the correct phys_addr_t type instead, along with all other variables in this driver that hold a physical address.
The gicv5 driver correctly uses u64 variables, while all other irqchip drivers don't call virt_to_phys or similar interfaces. It's expected that other device drivers have similar issues, but fixing this one is sufficient for booting a virtio based guest.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.201-140.219Upgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-5.10.251-248.983Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.12-debuginfoUpgrade perf6.12Upgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.163-186.299Upgrade bpftoolUpgrade kernel6.12-libbpf-staticUpgrade kernel-tools-develUpgrade kernel6.12-debuginfoUpgrade kernelUpgrade kernel6.12-libbpf-develUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel6.12-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel6.12-tools-debuginfoUpgrade kernel-toolsUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-tools-develUpgrade python3-perf6.12Upgrade perf-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-headersUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel-libbpfUpgrade kernel6.12-modules-extraUpgrade kernel6.12-develUpgrade kernel-headersUpgrade kernel-develUpgrade bpftool6.12Upgrade perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.12.68-92.122Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf | Mar 9, 2026 | Feb 4, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 11, 2026 | Feb 11, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 13, 2026 | Feb 4, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 4, 2026 |
| Ubuntu | — | Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-6.17Upgrade linux-image-oracle-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-gcp-6.17Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-oracle-6.17Upgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-oem-6.17Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1110-azure-fipsUpgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.17.0-1021-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-awsUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1088-gkeopUpgrade linux-image-5.15.0-1105-gcp-fipsUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-64k-6.17Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1102-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-175-lowlatencyUpgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-176-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1097-kvmUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1100-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-ibmUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-gcp-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-176-generic-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fde-6.17Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-6.8.0-117-genericUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-5.15.0-1100-intel-iotgUpgrade linux-image-azureUpgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-5.15.0-1101-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1100-nvidiaUpgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1059-azureUpgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1046-nvidia-tegra-igxUpgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-gkeopUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1056-azureUpgrade linux-image-5.15.0-1105-gcpUpgrade linux-image-5.15.0-1105-aws-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-5.15.0-175-lowlatency-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-5.15.0-1105-awsUpgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-fipsUpgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-xilinxUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-intelUpgrade linux-image-azure-6.17Upgrade linux-image-6.8.0-116-fipsUpgrade linux-image-6.8.0-1055-awsUpgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-raspi-5.15Upgrade linux-image-realtime-6.17Upgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.17.0-1030-oemUpgrade linux-image-5.15.0-176-genericUpgrade linux-image-5.15.0-1097-intel-iot-realtimeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1046-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-gkeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-5.15.0-1104-realtimeUpgrade linux-image-5.15.0-1099-raspiUpgrade linux-image-5.15.0-1099-ibmUpgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp | Apr 10, 2026 | Feb 4, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 4, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub