In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation
walk_s1() and kvm_walk_nested_s2() expect to be called while holding kvm->srcu to guard against memslot changes. While this is generally the case, __kvm_at_s12() and __kvm_find_s1_desc_level() call into the respective walkers without taking kvm->srcu.
Fix by acquiring kvm->srcu prior to the table walk in both instances.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-modules-extraUpgrade kernel6.18-debuginfoUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-headersUpgrade microvm-kernel6.18Upgrade kernel6.18-develUpgrade kernel6.18-toolsUpgrade kernel6.18-tools-develUpgrade bpftool6.18Upgrade perf6.18-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade kernel-livepatch-6.18.35-68.127Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18Upgrade python3-perf6.18Upgrade perf6.18Upgrade kernel6.18-modules-extra-common | Jul 13, 2026 | Jun 25, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 10, 2026 | Jun 25, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-toolsUpgrade libperf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-coreUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade rtlaUpgrade kernel-debugUpgrade kernel-modules-extra-matchedUpgrade kernel-uki-virtUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade kernel-rt-modules-extra | Sep 15, 2026 | Sep 9, 2026 |
| Ubuntu | — | Upgrade linux-image-generic-7.0Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-aws-64kUpgrade linux-image-azure-fde-6.17Upgrade linux-image-azure-fde-7.0Upgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-oem-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04dUpgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-raspi-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-realtime-6.17Upgrade linux-image-oem-24.04Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-1009-oemUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-gcp-6.17Upgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-gcp-7.0Upgrade linux-image-realtimeUpgrade linux-image-nvidia-6.17Upgrade linux-image-6.17.0-1030-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-oem-26.04Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibm-7.0Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-gke-64kUpgrade linux-image-gke-7.0Upgrade linux-image-gke-64k-7.0Upgrade linux-image-oem-6.17Upgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oracle-6.17Upgrade linux-image-nvidiaUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-raspiUpgrade linux-image-azure-6.17Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-oracle-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-6.17.0-1021-azureUpgrade linux-image-oem-26.04aUpgrade linux-image-nvidia-bosUpgrade linux-image-ibmUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-azure-7.0 | Jul 20, 2026 | Jun 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub