In multiple functions of mem_protect.c, there is a possible way to access hypervisor memory due to a memory access check in the wrong place. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Aug 14, 2023 |
| Ubuntu | — | Upgrade linux-image-6.2.0-33-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.2.0-1014-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-genericUpgrade linux-image-6.2.0-1012-azure-fdeUpgrade linux-image-6.2.0-33-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-6.2.0-1010-ibmUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-6.2.0-1012-azureUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-nvidia-6.2Upgrade linux-image-6.2.0-1013-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.2.0-1012-oracleUpgrade linux-image-6.2.0-1005-starfiveUpgrade linux-image-6.2.0-1012-awsUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-6.2.0-1013-raspiUpgrade linux-image-6.2.0-33-generic-64kUpgrade linux-image-6.2.0-1013-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.2.0-1013-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-azureUpgrade linux-image-oracle | Sep 20, 2023 | Aug 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub