In the Linux kernel, the following vulnerability has been resolved:
KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
If allocating a new instance of an I/O bus fails when unregistering a device, wait to destroy the device until after all readers are guaranteed to see the new null bus. Destroying devices before the bus is nullified could lead to use-after-free since readers expect the devices on their reference of the bus to remain valid.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python-perfUpgrade bpftool | Aug 2, 2024 | Feb 29, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | May 13, 2024 | Feb 29, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libsUpgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel | Jul 23, 2024 | Feb 29, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 17, 2024 | Feb 29, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-preemptUpgrade kernel-azure-develUpgrade kernel-azure-baseUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-default-devel | Aug 9, 2024 | Feb 29, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub