A flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could purposely fail to intercept the shutdown of a cooperative nested guest (L2), possibly leading to a page fault and kernel panic in the host (L0).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 25, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 25, 2022 |
| Suse | — | Upgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-debugUpgrade dtb-appleUpgrade kernel-64kbUpgrade dtb-marvellUpgrade kernel-devel-rtUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-rtUpgrade kernel-default-develUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade dtb-lgUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade kernel-azure-extraUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade dtb-renesasUpgrade dtb-amdUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade kernel-defaultUpgrade dtb-socionextUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-armUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade dlm-kmp-default | Jan 27, 2023 | Oct 25, 2022 |
| Ubuntu | — | Upgrade linux-image-5.19.0-1014-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-1019-kvmUpgrade linux-image-5.15.0-1034-azureUpgrade linux-image-5.15.0-1025-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-67-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.19.0-1018-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-gke-5.15Upgrade linux-image-5.19.0-1018-ibmUpgrade linux-image-5.19.0-1021-azureUpgrade linux-image-5.15.0-1025-raspiUpgrade linux-image-5.19.0-35-genericUpgrade linux-image-5.15.0-1030-oracleUpgrade linux-image-5.19.0-1014-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-5.19.0-1020-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-67-genericUpgrade linux-image-5.15.0-1026-ibmUpgrade linux-image-5.15.0-1034-azure-fdeUpgrade linux-image-5.19.0-35-generic-lpaeUpgrade linux-image-5.15.0-67-lowlatencyUpgrade linux-image-5.15.0-1029-kvmUpgrade linux-image-5.15.0-1016-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1028-gkeUpgrade linux-image-5.19.0-1018-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-67-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1026-intel-iotgUpgrade linux-image-5.19.0-1018-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-5.19.0-1018-oracleUpgrade linux-image-5.19.0-35-generic-64kUpgrade linux-image-5.15.0-1031-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1030-gcpUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-67-lowlatency-64k | Mar 22, 2023 | Oct 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub