In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Handle SRCU initialization failure during page track init
Check the return of init_srcu_struct(), which can fail due to OOM, when initializing the page track mechanism. Lack of checking leads to a NULL pointer deref found by a modified syzkaller.
[Move the call towards the beginning of kvm_arch_init_vm. - Paolo]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-tools | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade kernel-syms-rtUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade dtb-appleUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-manUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-docsUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade kernel-develUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-64kbUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade gfs2-kmp-rt | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15No solution exists | Jun 26, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub