In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Handle SRCU initialization failure during page track init
Check the return of init_srcu_struct(), which can fail due to OOM, when initializing the page track mechanism. Lack of checking leads to a NULL pointer deref found by a modified syzkaller.
[Move the call towards the beginning of kvm_arch_init_vm. - Paolo]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.75-79.358Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-64kbUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-defaultUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade kernel-default-base-rebuildUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-alteraUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade dtb-mediatekUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade dtb-sprdUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-armUpgrade kernel-rt_debug-vdso | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | No solution existsUpgrade linux-azure-fde-5.15 | Jun 26, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub