A race condition in the x86 KVM subsystem in the Linux kernel through 6.1-rc6 allows guest OS users to cause a denial of service (host OS crash or host OS memory corruption) when nested virtualisation and the TDP MMU are enabled.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-develUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-64k-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libs-develUpgrade rtlaUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-64k-develUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-64kUpgrade kernel-64k-debug-develUpgrade kernel-64k-modulesUpgrade kernel-rt-debugUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-debug-modules-extra | Aug 9, 2023 | Nov 30, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-tools-develUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-debuginfo | Jan 24, 2023 | Nov 30, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools | Feb 17, 2025 | Nov 23, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 2, 2023 | Nov 30, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Nov 30, 2022 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 14, 2023 | Nov 23, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 2, 2023 | Nov 30, 2022 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-devel | Mar 5, 2024 | Nov 30, 2022 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade kernel-azure-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade kernel-kvmsmallUpgrade dtb-lgUpgrade kernel-64kbUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-devel | Dec 19, 2022 | Nov 30, 2022 |
| Ubuntu | — | Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-5.19.0-1021-azureUpgrade linux-image-5.19.0-1020-awsUpgrade linux-image-5.15.0-1031-awsUpgrade linux-image-5.15.0-1025-raspiUpgrade linux-image-5.19.0-1019-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1026-intel-iotgUpgrade linux-image-5.19.0-1014-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.19.0-1018-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1030-oracleUpgrade linux-image-5.15.0-67-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.19.0-35-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1025-raspi-nolpaeUpgrade linux-image-5.19.0-1018-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1034-azureUpgrade linux-image-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-35-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.19.0-1018-ibmUpgrade linux-image-5.15.0-67-lowlatency-64kUpgrade linux-image-5.15.0-1016-gkeopUpgrade linux-image-5.19.0-1018-oracleUpgrade linux-image-5.15.0-1029-kvmUpgrade linux-image-5.19.0-1018-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1026-ibmUpgrade linux-image-5.15.0-1028-gkeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-67-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1034-azure-fdeUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-5.19.0-35-generic-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-1030-gcpUpgrade linux-image-5.15.0-67-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-67-genericUpgrade linux-image-5.19.0-1014-raspi-nolpae | Mar 22, 2023 | Nov 30, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub