A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest (L2), possibly leading to a page fault and kernel panic in the host (L0).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 25, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 25, 2022 |
| Suse | — | Upgrade kernel-devel-rtUpgrade dtb-qcomUpgrade dtb-apmUpgrade kernel-64kbUpgrade kernel-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-debugUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade dtb-appleUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade dtb-rockchipUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade kernel-azureUpgrade dlm-kmp-azureUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade dtb-caviumUpgrade kernel-rt-devel | Jan 27, 2023 | Oct 25, 2022 |
| Ubuntu | — | Upgrade linux-image-5.19.0-35-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1030-gcpUpgrade linux-image-5.15.0-1031-awsUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-35-generic-lpaeUpgrade linux-image-5.15.0-67-genericUpgrade linux-image-5.15.0-67-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-1018-lowlatency-64kUpgrade linux-image-5.15.0-67-generic-lpaeUpgrade linux-image-5.15.0-1026-intel-iotgUpgrade linux-image-5.15.0-1029-kvmUpgrade linux-image-5.19.0-1018-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.19.0-1018-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-67-lowlatencyUpgrade linux-image-5.15.0-1034-azure-fdeUpgrade linux-image-5.15.0-1026-ibmUpgrade linux-image-5.15.0-1028-gkeUpgrade linux-image-5.15.0-1016-gkeopUpgrade linux-image-azureUpgrade linux-image-5.15.0-1025-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.19.0-1018-gcpUpgrade linux-image-5.19.0-1019-kvmUpgrade linux-image-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.19.0-1020-awsUpgrade linux-image-genericUpgrade linux-image-5.19.0-1018-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.19.0-35-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1025-raspi-nolpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1030-oracleUpgrade linux-image-5.15.0-67-generic-64kUpgrade linux-image-ibmUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-1014-raspiUpgrade linux-image-5.19.0-1021-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.19.0-1014-raspi-nolpaeUpgrade linux-image-5.15.0-1034-azure | Mar 22, 2023 | Oct 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub