A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get the page's pfn. As vaddr and vm_pgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the userspace region and potentially corrupt the kernel, resulting in a denial of service condition.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.43-20.103Upgrade kernel-livepatch-5.10.112-108.499Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.43-20.123Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade bpftool | Jul 4, 2022 | Jul 4, 2022 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-develUpgrade kernel-headersUpgrade perf-debuginfo | Feb 17, 2025 | Apr 7, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 5, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 13, 2023 | Aug 5, 2022 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Aug 5, 2022 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 9, 2022 | Apr 7, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 30, 2022 | Aug 5, 2022 |
| Suse | — | Upgrade kernel-docsUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade kernel-64kbUpgrade dtb-renesasUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-source-azureUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade kernel-preempt-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-preemptUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade gfs2-kmp-preemptUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-preempt-optionalUpgrade kernel-macrosUpgrade dlm-kmp-preemptUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade dtb-exynosUpgrade kernel-preempt-extraUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade dtb-apmUpgrade kernel-sourceUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade dtb-zteUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-preemptUpgrade kernel-default-optionalUpgrade kernel-preemptUpgrade dtb-alteraUpgrade kernel-preempt-develUpgrade dtb-allwinnerUpgrade dtb-alUpgrade dtb-mediatekUpgrade cluster-md-kmp-preemptUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-develUpgrade kernel-devel-azure | Oct 26, 2022 | Aug 5, 2022 |
| Ubuntu | — | Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1008-intel-iotgUpgrade linux-image-5.4.0-1046-gkeopUpgrade linux-image-5.14.0-1036-oemUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1074-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-5.13.0-48-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-37-genericUpgrade linux-image-5.15.0-1008-gcpUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1076-oracleUpgrade linux-image-5.13.0-1028-azureUpgrade linux-image-5.13.0-1028-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1083-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1011-raspi-nolpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-37-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-1027-kvmUpgrade linux-image-5.4.0-117-lowlatencyUpgrade linux-image-5.13.0-48-lowlatencyUpgrade linux-image-5.13.0-48-generic-lpaeUpgrade linux-image-5.15.0-37-generic-lpaeUpgrade linux-image-5.4.0-1078-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1078-awsUpgrade linux-image-5.13.0-48-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1083-azureUpgrade linux-image-5.4.0-117-genericUpgrade linux-image-5.13.0-1031-raspi-nolpaeUpgrade linux-image-5.13.0-1014-intelUpgrade linux-image-5.4.0-1065-raspiUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-5.13.0-1033-oracleUpgrade linux-image-5.4.0-117-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1008-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1026-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-37-lowlatency-64kUpgrade linux-image-oemUpgrade linux-image-5.15.0-1010-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1009-oracleUpgrade linux-image-5.13.0-1031-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1068-kvmUpgrade linux-image-genericUpgrade linux-image-5.15.0-37-generic-64kUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.13.0-1030-gcpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1010-azureUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1007-ibmUpgrade linux-image-5.15.0-1011-raspiUpgrade linux-image-5.15.0-1011-awsUpgrade linux-image-virtual-hwe-18.04 | May 12, 2022 | Apr 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub