A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support to L1. An attacker at L2 with code execution can execute code on an indirect branch on the host machine. We recommend upgrading to Kernel 6.2 or applying the relevant stable backports (v5.4.233, v5.10.170, v5.15.96, v6.1.14).
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-docUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modulesUpgrade kernel-modulesUpgrade kernel-64k-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade perfUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade python3-perf | May 15, 2023 | Jan 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perfUpgrade bpftool-debuginfo | Mar 22, 2023 | Jan 9, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.15-28.43Upgrade kernel-libbpfUpgrade bpftool | Feb 17, 2025 | Sep 28, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | Jan 9, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Jan 9, 2023 |
| Dell Powerstore Dsa2023366 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 5, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | May 8, 2023 | Jan 9, 2023 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 4, 2023 | Sep 28, 2022 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | May 15, 2023 | Jan 9, 2023 |
| Suse | — | Upgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade kernel-preempt-develUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade kernel-symsUpgrade kernel-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade dtb-zteUpgrade gfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-qcomUpgrade kernel-obs-buildUpgrade kernel-obs-qaUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade dtb-alUpgrade kernel-rt-extraUpgrade dlm-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-preemptUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-source | May 10, 2023 | Jan 9, 2023 |
| Ubuntu | — | Upgrade linux-image-oem-osp1Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-69-genericUpgrade linux-image-5.4.0-1096-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1027-intel-iotgUpgrade linux-image-5.4.0-1023-xilinx-zynqmpUpgrade linux-image-5.15.0-69-generic-64kUpgrade linux-image-5.17.0-1029-oemUpgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1027-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1060-bluefieldUpgrade linux-image-5.19.0-38-genericUpgrade linux-image-5.15.0-1026-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1099-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-146-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-5.19.0-1022-awsUpgrade linux-image-5.4.0-1102-gcpUpgrade linux-image-5.4.0-1098-oracleUpgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-gke-5.4Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1032-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.14.0-1059-oemUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.0.0-1013-oemUpgrade linux-image-6.1.0-1008-oemUpgrade linux-image-5.15.0-1026-raspi-nolpaeUpgrade linux-image-5.19.0-1022-azureUpgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1033-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-146-generic-lpaeUpgrade linux-image-5.4.0-146-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1105-azureUpgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1046-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1017-gkeopUpgrade linux-image-5.4.0-1088-kvmUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-69-lowlatencyUpgrade linux-image-5.15.0-69-generic-lpaeUpgrade linux-image-5.15.0-1035-azureUpgrade linux-image-5.15.0-1029-gkeUpgrade linux-image-5.15.0-69-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1035-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1031-gcpUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1066-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1082-raspiUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1030-gkeUpgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1030-kvmUpgrade linux-image-oemUpgrade linux-image-lowlatency-64k | Apr 10, 2023 | Jan 9, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub