In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Handle SRCU initialization failure during page track init
Check the return of init_srcu_struct(), which can fail due to OOM, when initializing the page track mechanism. Lack of checking leads to a NULL pointer deref found by a modified syzkaller.
[Move the call towards the beginning of kvm_arch_init_vm. - Paolo]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.10.75-79.358Upgrade python-perf-debuginfo | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade dtb-caviumUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-default-livepatchUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-symsUpgrade cluster-md-kmp-azure | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15No solution exists | Jun 26, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub