A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or applying the relevant stable backports (v5.4.233, v5.10.170, v5.15.96, v6.1.14).
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-devel-matchedUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade rtlaUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-64k-modulesUpgrade kernel-modules-extraUpgrade kernel-64kUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-64k-develUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-64k-modules-coreUpgrade kernel-debug-develUpgrade kernel-core | May 15, 2023 | Jan 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade kernel-tools-devel | Mar 22, 2023 | Jan 9, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.15-28.43Upgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade perf-debuginfo | Feb 17, 2025 | Sep 28, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 15, 2023 | Jan 9, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Jan 9, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | May 8, 2023 | Jan 9, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 4, 2023 | Sep 28, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2023 | Jan 9, 2023 |
| Suse | — | Upgrade dtb-xilinxUpgrade dtb-caviumUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade dtb-renesasUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade kernel-rt_debugUpgrade dtb-apmUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade dtb-armUpgrade dtb-amazonUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-devel-rtUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade kernel-symsUpgrade kernel-preempt-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-default | May 10, 2023 | Jan 9, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1098-oracleUpgrade linux-image-5.15.0-69-genericUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1096-gkeUpgrade linux-image-5.4.0-1060-bluefieldUpgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-gkeUpgrade linux-image-5.19.0-38-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-146-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1023-xilinx-zynqmpUpgrade linux-image-oem-osp1Upgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-5.17.0-1029-oemUpgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-5.4.0-1099-awsUpgrade linux-image-gcpUpgrade linux-image-5.14.0-1059-oemUpgrade linux-image-5.4.0-1102-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.0.0-1013-oemUpgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-5.19.0-1022-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-6.1.0-1008-oemUpgrade linux-image-5.4.0-146-generic-lpaeUpgrade linux-image-5.4.0-1046-ibmUpgrade linux-image-5.4.0-1105-azureUpgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-5.4.0-1088-kvmUpgrade linux-image-genericUpgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-gkeop-5.4Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1066-gkeopUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-bluefieldUpgrade linux-image-oem-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-5.4.0-1082-raspiUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-5.15.0-1035-azureUpgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.19.0-1022-azureUpgrade linux-image-5.4.0-146-lowlatencyUpgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-oemUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1033-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04a | Apr 10, 2023 | Jan 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub