A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-5.10.147-133.644Upgrade perf-debuginfoUpgrade kernel | Oct 26, 2022 | Aug 26, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade perfUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-devel | Feb 17, 2025 | Apr 21, 2022 |
| Debian | — | Upgrade linux | Nov 1, 2022 | Aug 26, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Aug 2, 2022 | Jul 14, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 26, 2022 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-docs | Jun 13, 2023 | Aug 26, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1027-awsUpgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1030-azure-fdeUpgrade linux-image-5.15.0-57-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-57-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1022-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1030-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1025-kvmUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1024-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-57-lowlatencyUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-57-genericUpgrade linux-image-5.15.0-1022-raspi-nolpaeUpgrade linux-image-5.15.0-1026-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-57-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1012-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1026-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1022-raspiUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-virtual-hwe-20.04 | Jan 7, 2023 | Aug 26, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 26, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
