A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or applying the relevant stable backports (v5.4.233, v5.10.170, v5.15.96, v6.1.14).
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-coreUpgrade bpftoolUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-docUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-64k-develUpgrade kernelUpgrade kernel-rt-debugUpgrade rtlaUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64kUpgrade kernel-rt-develUpgrade perfUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade kernel-rt-debug-devel | May 15, 2023 | Jan 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfo | Mar 22, 2023 | Jan 9, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.15-28.43Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Sep 28, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | Jan 9, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Jan 9, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | May 8, 2023 | Jan 9, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 4, 2023 | Sep 28, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2023 | Jan 9, 2023 |
| Suse | — | Upgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-source-azureUpgrade dtb-amdUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-preempt-develUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-lgUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-default-optionalUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade dtb-alUpgrade kernel-docs-htmlUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-zteUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-preemptUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-syms-azure | May 10, 2023 | Jan 9, 2023 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1023-xilinx-zynqmpUpgrade linux-image-5.4.0-1099-awsUpgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-5.19.0-1022-awsUpgrade linux-image-azure-fdeUpgrade linux-image-5.19.0-38-genericUpgrade linux-image-5.4.0-1096-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04Upgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.14.0-1059-oemUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1098-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.0.0-1013-oemUpgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-awsUpgrade linux-image-5.4.0-1060-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1102-gcpUpgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-5.15.0-69-genericUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-146-genericUpgrade linux-image-5.17.0-1029-oemUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-gke-5.4Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-5.4.0-1066-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-1082-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-5.4.0-1088-kvmUpgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-raspi2Upgrade linux-image-6.1.0-1008-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1046-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-146-generic-lpaeUpgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-5.15.0-1035-azureUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1033-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-146-lowlatencyUpgrade linux-image-5.19.0-1022-azureUpgrade linux-image-5.4.0-1105-azure | Apr 10, 2023 | Jan 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub