In the Linux kernel, the following vulnerability has been resolved:
KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
The below warning is splatting during guest reboot.
------------[ cut here ]------------ WARNING: CPU: 0 PID: 1931 at arch/x86/kvm/x86.c:10322 kvm_arch_vcpu_ioctl_run+0x874/0x880 [kvm] CPU: 0 PID: 1931 Comm: qemu-system-x86 Tainted: G I 5.17.0-rc1+ #5 RIP: 0010:kvm_arch_vcpu_ioctl_run+0x874/0x880 [kvm] Call Trace: <TASK> kvm_vcpu_ioctl+0x279/0x710 [kvm] __x64_sys_ioctl+0x83/0xb0 do_syscall_64+0x3b/0xc0 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fd39797350b
This can be triggered by not exposing tsc-deadline mode and doing a reboot in the guest. The lapic_shutdown() function which is called in sys_reboot path will not disarm the flying timer, it just masks LVTT. lapic_shutdown() clears APIC state w/ LVT_MASKED and timer-mode bit is 0, this can trigger timer-mode switch between tsc-deadline and oneshot/periodic, which can result in preemption timer be cancelled in apic_update_lvtt(). However, We can't depend on this when not exposing tsc-deadline mode and oneshot/periodic modes emulated by preemption timer. Qemu will synchronise states around reset, let's cancel preemption timer under KVM_SET_LAPIC.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Oct 9, 2024 | Jun 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 20, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade reiserfs-kmp-rt | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15No solution exists | Jun 26, 2025 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub