A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or applying the relevant stable backports (v5.4.233, v5.10.170, v5.15.96, v6.1.14).
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade bpftoolUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-kvmUpgrade kernel-64k-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-64kUpgrade rtlaUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-64k-develUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade python3-perfUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-core | May 15, 2023 | Jan 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade perfUpgrade kernel-devel | Mar 22, 2023 | Jan 9, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools-develUpgrade perfUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.15-28.43Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-libbpfUpgrade python3-perf-debuginfo | Feb 17, 2025 | Sep 28, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | Jan 9, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Jan 9, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | May 8, 2023 | Jan 9, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 4, 2023 | Sep 28, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2023 | Jan 9, 2023 |
| Suse | — | Upgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade dtb-rockchipUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-zteUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-preemptUpgrade kernel-obs-buildUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-alUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade dtb-marvellUpgrade kernel-rtUpgrade kernel-azureUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade kernel-64kbUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade dtb-amd | May 10, 2023 | Jan 9, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-awsUpgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gke-5.4Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-69-genericUpgrade linux-image-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-5.17.0-1029-oemUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1096-gkeUpgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.19.0-1022-awsUpgrade linux-image-5.14.0-1059-oemUpgrade linux-image-5.4.0-146-genericUpgrade linux-image-5.4.0-1098-oracleUpgrade linux-image-5.4.0-1023-xilinx-zynqmpUpgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-6.0.0-1013-oemUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1102-gcpUpgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04cUpgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-5.4.0-1060-bluefieldUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1099-awsUpgrade linux-image-5.19.0-38-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-gke-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.1.0-1008-oemUpgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-5.15.0-1035-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-5.15.0-1033-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-146-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1105-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-5.4.0-1066-gkeopUpgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-5.4.0-1082-raspiUpgrade linux-image-virtualUpgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-146-generic-lpaeUpgrade linux-image-5.19.0-1022-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-1046-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-5.4.0-1088-kvmUpgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oemUpgrade linux-image-lowlatency | Apr 10, 2023 | Jan 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub