In the Linux kernel, the following vulnerability has been resolved:
KVM: Destroy I/O bus devices on unregister failure _after_ sync'ing SRCU
If allocating a new instance of an I/O bus fails when unregistering a device, wait to destroy the device until after all readers are guaranteed to see the new null bus. Destroying devices before the bus is nullified could lead to use-after-free since readers expect the devices on their reference of the bus to remain valid.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python-perf | Aug 2, 2024 | Feb 29, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | May 13, 2024 | Feb 29, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-devel | Jul 23, 2024 | Feb 29, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Feb 29, 2024 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-preemptUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade reiserfs-kmp-default | Aug 9, 2024 | Feb 29, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub