An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED situations.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-64k-develUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-docUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-debugUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debugUpgrade kernel-64k-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-64k-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modules-extraUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-64kUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-devel-matched | May 15, 2023 | Sep 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.69-37.134Upgrade python-perfUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel | Oct 14, 2022 | Sep 2, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python3-perfUpgrade perf | Feb 17, 2025 | May 30, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 15, 2023 | Sep 2, 2022 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Sep 2, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Dec 22, 2022 | Sep 2, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jan 6, 2023 | Sep 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Nov 15, 2022 | Sep 2, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 12, 2023 | May 30, 2022 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2023 | Sep 2, 2022 |
| Suse | — | Upgrade dtb-exynosUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade cluster-md-kmp-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-preemptUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-amazonUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade dtb-alUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-preemptUpgrade gfs2-kmp-azureUpgrade dtb-zteUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-extraUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade kernel-obs-buildUpgrade dlm-kmp-preemptUpgrade kernel-rt_debug-develUpgrade dtb-qcomUpgrade kernel-default-develUpgrade dtb-lgUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade dtb-caviumUpgrade kernel-obs-qaUpgrade dtb-marvellUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-preemptUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-kvmsmallUpgrade kernel-preempt-optionalUpgrade kernel-preempt-extraUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade gfs2-kmp-preemptUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-preempt-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade dtb-sprdUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-symsUpgrade kernel-syms-rt | Oct 26, 2022 | Sep 2, 2022 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-5.15.0-1019-oracleUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1017-gkeUpgrade linux-image-5.15.0-1019-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1016-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1019-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-50-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1016-raspi-nolpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-50-generic-lpaeUpgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-50-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1021-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1004-gkeopUpgrade linux-image-awsUpgrade linux-image-5.15.0-1017-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-50-generic-64kUpgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-50-genericUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1021-azure | Oct 11, 2022 | Sep 2, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 2, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub