In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Tear down vGIC on failed vCPU creation
If kvm_arch_vcpu_create() fails to share the vCPU page with the hypervisor, we propagate the error back to the ioctl but leave the vGIC vCPU data initialised. Note only does this leak the corresponding memory when the vCPU is destroyed but it can also lead to use-after-free if the redistributor device handling tries to walk into the vCPU.
Add the missing cleanup to kvm_arch_vcpu_create(), ensuring that the vGIC vCPU structures are destroyed on error.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.25-32.101Upgrade kernel6.12Upgrade perf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade perfUpgrade perf6.12-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade python3-perf6.12Upgrade kernel-libbpf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade python3-perf6.12-debuginfoUpgrade python3-perfUpgrade bpftoolUpgrade kernel6.12-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade kernel-modules-extra-commonUpgrade perf6.12Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-libbpf-static | Aug 5, 2025 | May 9, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 12, 2025 | May 9, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade dtb-lgUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-sourceUpgrade dtb-qcomUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdso | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1045-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-5.15.0-1096-intel-iot-realtimeUpgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-lts-18.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-1099-nvidiaUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-aws-5.4Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1109-azureUpgrade linux-image-ibm-5.15Upgrade linux-image-5.4.0-1075-xilinx-zynqmpUpgrade linux-image-5.15.0-174-genericUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-aws-hweUpgrade linux-image-azureUpgrade linux-image-intelUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-4.15.0-248-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1104-gcpUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-5.15.0-1096-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1110-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-176-generic-64kUpgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-aws-4.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-4.15Upgrade linux-image-ibmUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-bluefield-5.4Upgrade linux-image-4.15.0-1199-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-4.15.0-1183-gcpUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-kvm-5.4Upgrade linux-image-generic-64k-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-4.15.0-2128-aws-fipsUpgrade linux-image-5.15.0-1104-gcp-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1056-nvidia-tegra-rtUpgrade linux-image-5.15.0-1056-nvidia-tegraUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-5.15.0-174-generic-64kUpgrade linux-image-5.4.0-1103-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1087-gkeopUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1103-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-4.15.0-1145-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-fips-5.4Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1061-iotUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1161-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-5.4Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-4.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azure-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-fips-5.4Upgrade linux-image-5.15.0-174-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-fips-4.15Upgrade linux-image-raspiUpgrade linux-image-gcp-5.4Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1153-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-gke-64kUpgrade linux-image-oem-20.04Upgrade linux-image-aws-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-kvmUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-1099-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-virtual-5.4Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-4.15.0-1190-awsUpgrade linux-image-5.15.0-1100-gkeUpgrade linux-image-5.15.0-1098-ibmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-fips-4.15Upgrade linux-image-xilinxUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-fips-5.4Upgrade linux-image-5.4.0-1157-aws-fipsUpgrade linux-image-gkeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.4.0-228-genericUpgrade linux-image-virtual-5.15Upgrade linux-image-5.4.0-1144-kvmUpgrade linux-image-generic-5.4Upgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.4.0-228-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1068-xilinx-zynqmpUpgrade linux-image-5.15.0-174-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1104-aws-fipsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1098-raspiUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-azure-cvmUpgrade linux-image-azure-5.4Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-174-lowlatency-64kUpgrade linux-image-ibm-5.4Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1101-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-4.15.0-1200-azureUpgrade linux-image-5.4.0-1140-raspiUpgrade linux-image-4.15.0-1172-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.4.0-228-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-realtimeUpgrade linux-image-oracleUpgrade linux-image-aws-64kUpgrade linux-image-snapdragon-5.4Upgrade linux-image-5.15.0-176-genericUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-4.15.0-2091-gcp-fipsUpgrade linux-image-oracle-5.4Upgrade linux-image-5.4.0-1161-azure-fipsUpgrade linux-image-oracle-4.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-generic-5.15Upgrade linux-image-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-4.15.0-1152-oracleUpgrade linux-image-4.15.0-2109-azure-fipsUpgrade linux-image-5.4.0-1160-gcp-fipsUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpae-5.4Upgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1104-aws-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1131-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-lts-18.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-5.4.0-1116-bluefieldUpgrade linux-image-4.15.0-248-genericUpgrade linux-image-5.15.0-1045-nvidia-tegra-igxUpgrade linux-image-5.4.0-1160-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-fips-5.4Upgrade linux-image-fips-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-5.15.0-1104-awsUpgrade linux-image-5.4.0-1157-awsUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-174-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-5.4Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1099-intel-iotgUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.4.0-1155-oracle | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 9, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub