A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service (host OS crash or host OS memory corruption) when nested virtualisation and the TDP MMU are enabled.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-develUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-toolsUpgrade kernel-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64kUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-64k-debug-coreUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernelUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade rtlaUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernel-docUpgrade perfUpgrade kernel-modulesUpgrade kernel-64k-debugUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade python3-perf | Aug 9, 2023 | Nov 30, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-develUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Jan 24, 2023 | Nov 30, 2022 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-libbpf-static | Feb 17, 2025 | Nov 23, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 2, 2023 | Nov 30, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 30, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 14, 2023 | Nov 23, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 2, 2023 | Nov 30, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-core | Mar 5, 2024 | Nov 30, 2022 |
| Suse | — | Upgrade kernel-source-rtUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade dtb-renesasUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-xilinxUpgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-docsUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade dtb-armUpgrade kernel-obs-qaUpgrade dtb-caviumUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-defaultUpgrade kselftests-kmp-default | Dec 19, 2022 | Nov 30, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1026-intel-iotgUpgrade linux-image-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1025-raspi-nolpaeUpgrade linux-image-5.15.0-1030-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-5.19.0-1018-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-5.15.0-67-generic-64kUpgrade linux-image-5.15.0-1031-awsUpgrade linux-image-5.19.0-35-genericUpgrade linux-image-5.15.0-1025-raspiUpgrade linux-image-5.19.0-1019-kvmUpgrade linux-image-5.19.0-1020-awsUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.19.0-1021-azureUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.19.0-1014-raspiUpgrade linux-image-5.15.0-1016-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1029-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1034-azureUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.19.0-1018-ibmUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-67-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-5.19.0-35-generic-64kUpgrade linux-image-5.19.0-35-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.19.0-1018-lowlatencyUpgrade linux-image-5.15.0-1028-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1034-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.19.0-1014-raspi-nolpaeUpgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-1018-lowlatency-64kUpgrade linux-image-5.15.0-67-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.19.0-1018-oracleUpgrade linux-image-5.15.0-1026-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1030-gcpUpgrade linux-image-5.15.0-67-genericUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-5.15.0-67-generic-lpaeUpgrade linux-image-gcp | Mar 22, 2023 | Nov 30, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub