A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or applying the relevant stable backports (v5.4.233, v5.10.170, v5.15.96, v6.1.14).
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debugUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-devel-matchedUpgrade kernel-docUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-64k-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade rtlaUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-64k-debug-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-64kUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-rt-develUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade python3-perf | May 15, 2023 | Jan 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-livepatch-5.10.173-154.642Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftool | Mar 22, 2023 | Jan 9, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.15-28.43Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade perfUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-headers | Feb 17, 2025 | Sep 28, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 15, 2023 | Jan 9, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Jan 9, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | May 8, 2023 | Jan 9, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 4, 2023 | Sep 28, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2023 | Jan 9, 2023 |
| Suse | — | Upgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade kernel-debugUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade dtb-amdUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-64kbUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-alUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade dtb-sprdUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade kernel-preemptUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-zteUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade dtb-marvellUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade dtb-broadcomUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kernel-obs-qaUpgrade kernel-azureUpgrade dtb-exynos | May 10, 2023 | Jan 9, 2023 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-5.4.0-1066-gkeopUpgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-5.4.0-1105-azureUpgrade linux-image-oracleUpgrade linux-image-6.1.0-1008-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1046-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-5.15.0-1035-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1082-raspiUpgrade linux-image-5.4.0-146-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-5.15.0-1033-awsUpgrade linux-image-5.4.0-1088-kvmUpgrade linux-image-5.19.0-1022-azureUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-146-lowlatencyUpgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.0.0-1013-oemUpgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-5.19.0-38-genericUpgrade linux-image-5.4.0-1023-xilinx-zynqmpUpgrade linux-image-5.4.0-1098-oracleUpgrade linux-image-5.14.0-1059-oemUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1096-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-gke-5.4Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.17.0-1029-oemUpgrade linux-image-5.4.0-1102-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-146-genericUpgrade linux-image-raspiUpgrade linux-image-5.19.0-1022-awsUpgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-5.4.0-1099-awsUpgrade linux-image-5.4.0-1060-bluefieldUpgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-5.15.0-69-generic | Apr 10, 2023 | Jan 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub