In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Handle SRCU initialization failure during page track init
Check the return of init_srcu_struct(), which can fail due to OOM, when initializing the page track mechanism. Lack of checking leads to a NULL pointer deref found by a modified syzkaller.
[Move the call towards the beginning of kvm_arch_init_vm. - Paolo]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-headersUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatchUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-caviumUpgrade kernel-azure-livepatch-develUpgrade kernel-sourceUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade dtb-amazonUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-rt_debug-develUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-rtUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-hisiliconUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade dtb-mediatekUpgrade kernel-docsUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade kernel-default-manUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-devel | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | No solution existsUpgrade linux-azure-fde-5.15 | Jun 26, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub