A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root (host) user-level application to crash the host kernel by creating a confidential guest VM instance in AMD CPU that supports Secure Encrypted Virtualization (SEV).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-5.10.147-133.644 | Oct 26, 2022 | Aug 26, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-livepatch-6.1.10-15.42Upgrade python3-perf | Feb 17, 2025 | Apr 21, 2022 |
| Debian | — | Upgrade linux | Nov 1, 2022 | Aug 26, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Aug 2, 2022 | Jul 14, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 26, 2022 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-azure-devel | Jun 13, 2023 | Aug 26, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-57-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1022-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1027-awsUpgrade linux-image-5.15.0-1030-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1030-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-57-generic-64kUpgrade linux-image-5.15.0-1025-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-57-lowlatencyUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-57-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1012-gkeopUpgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-57-genericUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1022-raspi-nolpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1024-gkeUpgrade linux-image-5.15.0-1026-gcpUpgrade linux-image-5.15.0-1026-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1022-raspiUpgrade linux-image-genericUpgrade linux-image-virtual | Jan 7, 2023 | Aug 26, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 26, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub