An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED situations.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-64k-develUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-develUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-debug-develUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-64k-modulesUpgrade python3-perfUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-64kUpgrade kernel-64k-debugUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-devel-matchedUpgrade bpftoolUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-debug-modules | May 15, 2023 | Sep 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.69-37.134 | Oct 14, 2022 | Sep 2, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-develUpgrade kernel-tools-devel | Feb 17, 2025 | May 30, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | Sep 2, 2022 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Sep 2, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Dec 22, 2022 | Sep 2, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jan 6, 2023 | Sep 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Nov 15, 2022 | Sep 2, 2022 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 12, 2023 | May 30, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2023 | Sep 2, 2022 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade dtb-zteUpgrade dtb-caviumUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade kernel-preempt-develUpgrade kernel-rtUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-preemptUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade dtb-alUpgrade kernel-default-develUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade dtb-allwinnerUpgrade kernel-preempt-optionalUpgrade kernel-preempt-livepatch-develUpgrade kernel-docsUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-debug-develUpgrade dtb-armUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade gfs2-kmp-preemptUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-preemptUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade ocfs2-kmp-rt | Oct 26, 2022 | Sep 2, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-50-genericUpgrade linux-image-5.15.0-1021-awsUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1017-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1004-gkeopUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-5.15.0-50-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1021-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1019-gcpUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1017-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-50-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1019-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1016-raspi-nolpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-50-lowlatencyUpgrade linux-image-5.15.0-1016-raspiUpgrade linux-image-genericUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1019-kvmUpgrade linux-image-5.15.0-50-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1015-ibm | Oct 11, 2022 | Sep 2, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 2, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub