A flaw was found in KVM. When updating a guest's page table entry, vm_pgoff was improperly used as the offset to get the page's pfn. As vaddr and vm_pgoff are controllable by user-mode processes, this flaw allows unprivileged local users on the host to write outside the userspace region and potentially corrupt the kernel, resulting in a denial of service condition.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.43-20.103Upgrade kernel-livepatch-5.10.112-108.499Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-5.15.43-20.123 | Jul 4, 2022 | Jul 4, 2022 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.10-15.42 | Feb 17, 2025 | Apr 7, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 5, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Feb 13, 2023 | Aug 5, 2022 |
| Debian | — | Upgrade linux | Nov 4, 2022 | Aug 5, 2022 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 9, 2022 | Apr 7, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 30, 2022 | Aug 5, 2022 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-preemptUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade dtb-apmUpgrade dtb-alteraUpgrade kernel-defaultUpgrade dtb-zteUpgrade dtb-armUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-develUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade kernel-preempt-extraUpgrade kernel-syms-azureUpgrade cluster-md-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-preempt-develUpgrade ocfs2-kmp-preemptUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-alUpgrade kernel-azure-develUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-preemptUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade kernel-preempt-livepatch-develUpgrade dtb-lgUpgrade kernel-source-azureUpgrade kernel-preempt-optionalUpgrade gfs2-kmp-preemptUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade kernel-macrosUpgrade dlm-kmp-preemptUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debugUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dlm-kmp-default | Oct 26, 2022 | Aug 5, 2022 |
| Ubuntu | — | Upgrade linux-image-5.13.0-1014-intelUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1046-gkeopUpgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.14.0-1036-oemUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1083-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-117-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-5.13.0-1027-kvmUpgrade linux-image-5.13.0-48-generic-64kUpgrade linux-image-5.13.0-1028-azureUpgrade linux-image-5.15.0-37-lowlatencyUpgrade linux-image-5.4.0-117-genericUpgrade linux-image-5.4.0-1083-azureUpgrade linux-image-5.15.0-1011-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1065-raspiUpgrade linux-image-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-intel-iotgUpgrade linux-image-5.13.0-1031-raspi-nolpaeUpgrade linux-image-5.4.0-1076-oracleUpgrade linux-image-5.4.0-1078-gcpUpgrade linux-image-5.15.0-1008-intel-iotgUpgrade linux-image-5.4.0-1078-awsUpgrade linux-image-5.13.0-1033-oracleUpgrade linux-image-5.13.0-1028-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1074-gkeUpgrade linux-image-gke-5.15Upgrade linux-image-5.13.0-48-genericUpgrade linux-image-5.15.0-1008-gcpUpgrade linux-image-5.4.0-117-generic-lpaeUpgrade linux-image-5.13.0-48-lowlatencyUpgrade linux-image-5.15.0-37-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-37-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.13.0-48-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.13.0-1031-raspiUpgrade linux-image-5.15.0-1010-kvmUpgrade linux-image-5.15.0-37-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1068-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1007-ibmUpgrade linux-image-5.15.0-1009-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-37-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1010-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1026-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-aws-lts-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1008-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.13.0-1030-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1011-awsUpgrade linux-image-5.15.0-1011-raspi | May 12, 2022 | Apr 8, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub