A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or applying the relevant stable backports (v5.4.233, v5.10.170, v5.15.96, v6.1.14).
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-64k-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-docUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debugUpgrade bpftoolUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64kUpgrade kernel-modules-extraUpgrade rtlaUpgrade kernel-64k-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade python3-perfUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-64k-debug-develUpgrade kernel-64k-develUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modules | May 15, 2023 | Jan 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.173-154.642Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo | Mar 22, 2023 | Jan 9, 2023 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.1.15-28.43Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools | Feb 17, 2025 | Sep 28, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | Jan 9, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Jan 9, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | May 8, 2023 | Jan 9, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 4, 2023 | Sep 28, 2022 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 15, 2023 | Jan 9, 2023 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-develUpgrade dtb-armUpgrade dtb-amazonUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade kernel-rt-livepatchUpgrade dtb-lgUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-preempt-develUpgrade dtb-mediatekUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-preemptUpgrade dtb-rockchipUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade dtb-sprdUpgrade kernel-debug-livepatch-develUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade dtb-zteUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade dtb-alUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade kernel-zfcpdump | May 10, 2023 | Jan 9, 2023 |
| Ubuntu | — | Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-69-genericUpgrade linux-image-5.4.0-1060-bluefieldUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-5.19.0-38-genericUpgrade linux-image-5.4.0-1099-awsUpgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-5.4.0-1023-xilinx-zynqmpUpgrade linux-image-oem-22.04bUpgrade linux-image-6.0.0-1013-oemUpgrade linux-image-5.19.0-1022-awsUpgrade linux-image-5.4.0-1098-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-azureUpgrade linux-image-5.4.0-1096-gkeUpgrade linux-image-5.14.0-1059-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-146-genericUpgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-5.17.0-1029-oemUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-gke-5.4Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1102-gcpUpgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1033-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-5.4.0-1066-gkeopUpgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-5.4.0-1082-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-5.19.0-1022-azureUpgrade linux-image-5.4.0-1105-azureUpgrade linux-image-virtualUpgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1046-ibmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.1.0-1008-oemUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-146-lowlatencyUpgrade linux-image-5.4.0-146-generic-lpaeUpgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-5.15.0-1035-azureUpgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-ibmUpgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1088-kvm | Apr 10, 2023 | Jan 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub