In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Handle SRCU initialization failure during page track init
Check the return of init_srcu_struct(), which can fail due to OOM, when initializing the page track mechanism. Lack of checking leads to a NULL pointer deref found by a modified syzkaller.
[Move the call towards the beginning of kvm_arch_init_vm. - Paolo]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.75-79.358Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-devel | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-docsUpgrade kernel-debug-develUpgrade dtb-appleUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-rt-extraUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade kernel-default-manUpgrade dtb-xilinxUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-source-rtUpgrade kernel-64kb-develUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade kernel-64kbUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-azure-baseUpgrade kernel-default-optionalUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade ocfs2-kmp-64kbUpgrade dtb-caviumUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade dtb-qcom | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | No solution existsUpgrade linux-azure-fde-5.15 | Jun 26, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub