In the Linux kernel, the following vulnerability has been resolved:
KVM: Don't null dereference ops->destroy
A KVM device cleanup happens in either of two callbacks: 1) destroy() which is called when the VM is being destroyed; 2) release() which is called when a device fd is closed.
Most KVM devices use 1) but Book3s's interrupt controller KVM devices (XICS, XIVE, XIVE-native) use 2) as they need to close and reopen during the machine execution. The error handling in kvm_ioctl_create_device() assumes destroy() is always defined which leads to NULL dereference as discovered by Syzkaller.
This adds a checks for destroy!=NULL and adds a missing release().
This is not changing kvm_destroy_devices() as devices with defined release() should have been removed from the KVM devices list by then.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.135-122.509Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.59-33.133Upgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | May 22, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Feb 3, 2026 | Feb 2, 2026 |
| Ubuntu | — | Upgrade linux-intel-iotgUpgrade linux-kvmUpgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-realtimeUpgrade linux-bluefieldUpgrade linux-riscv-5.15Upgrade linux-gcp-fipsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-raspi-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-gcpUpgrade linux-fipsUpgrade linux-gcp-5.15Upgrade linux-nvidiaUpgrade linux-iotUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-gkeUpgrade linux-azure-5.4Upgrade linux-hwe-5.15Upgrade linux-azure-fipsUpgrade linux-hwe-5.4Upgrade linux-lowlatencyUpgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-azure-fde-5.15Upgrade linux-gcp-5.4Upgrade linux-raspiUpgrade linux-ibm-5.4Upgrade linux-azureUpgrade linux-oracle-5.15Upgrade linux-azure-5.15Upgrade linux-ibmUpgrade linux-oracleUpgrade linux | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub