In the Linux kernel, the following vulnerability has been resolved:
KVM: LAPIC: Also cancel preemption timer during SET_LAPIC
The below warning is splatting during guest reboot.
------------[ cut here ]------------ WARNING: CPU: 0 PID: 1931 at arch/x86/kvm/x86.c:10322 kvm_arch_vcpu_ioctl_run+0x874/0x880 [kvm] CPU: 0 PID: 1931 Comm: qemu-system-x86 Tainted: G I 5.17.0-rc1+ #5 RIP: 0010:kvm_arch_vcpu_ioctl_run+0x874/0x880 [kvm] Call Trace: <TASK> kvm_vcpu_ioctl+0x279/0x710 [kvm] __x64_sys_ioctl+0x83/0xb0 do_syscall_64+0x3b/0xc0 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fd39797350b
This can be triggered by not exposing tsc-deadline mode and doing a reboot in the guest. The lapic_shutdown() function which is called in sys_reboot path will not disarm the flying timer, it just masks LVTT. lapic_shutdown() clears APIC state w/ LVT_MASKED and timer-mode bit is 0, this can trigger timer-mode switch between tsc-deadline and oneshot/periodic, which can result in preemption timer be cancelled in apic_update_lvtt(). However, We can't depend on this when not exposing tsc-deadline mode and oneshot/periodic modes emulated by preemption timer. Qemu will synchronise states around reset, let's cancel preemption timer under KVM_SET_LAPIC.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jun 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 20, 2024 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-azureUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-vdso | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15No solution exists | Jun 26, 2025 | Jun 20, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub