An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade bpftool | Nov 28, 2023 | Apr 10, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.348-265.562Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.104-63.140Upgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.176-157.645Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade perf-debuginfo | Jun 11, 2024 | Apr 10, 2023 |
| Amazon_linux | — | Upgrade kernel | Jun 24, 2024 | Apr 10, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.21-1.45Upgrade kernel-libbpf-static | Feb 17, 2025 | Apr 10, 2023 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Apr 10, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Apr 10, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Jul 18, 2023 | Apr 10, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jan 10, 2024 | Apr 10, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Jul 10, 2023 | Apr 10, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | May 9, 2023 | Apr 10, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 8, 2023 | Apr 10, 2023 |
| Suse | — | Upgrade dtb-amlogicUpgrade dtb-armUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-azureUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade dtb-lgUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-renesasUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-default-livepatch | Jun 15, 2023 | Apr 10, 2023 |
| Ubuntu | — | Upgrade linux-image-5.4.0-150-lowlatencyUpgrade linux-image-6.2.0-1007-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-6.2.0-1006-raspiUpgrade linux-image-6.2.0-1005-lowlatencyUpgrade linux-image-5.4.0-150-genericUpgrade linux-image-6.2.0-23-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.19.0-1019-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1030-raspi-nolpaeUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.1.0-1009-oemUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1039-azureUpgrade linux-image-5.15.0-73-genericUpgrade linux-image-4.4.0-1120-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-1006-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-osp1Upgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-4.15.0-1151-gcpUpgrade linux-image-5.4.0-1064-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-5.19.0-1019-raspi-nolpaeUpgrade linux-image-4.4.0-241-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.2.0-23-generic-64kUpgrade linux-image-6.2.0-23-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-bluefieldUpgrade linux-image-5.19.0-43-genericUpgrade linux-image-oem-22.04Upgrade linux-image-6.2.0-1005-lowlatency-64kUpgrade linux-image-5.4.0-1106-gcpUpgrade linux-image-virtualUpgrade linux-image-azure-fdeUpgrade linux-image-intelUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.19.0-1025-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.19.0-43-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1050-ibmUpgrade linux-image-5.15.0-1034-kvmUpgrade linux-image-6.2.0-1005-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1039-azure-fdeUpgrade linux-image-5.15.0-1021-gkeopUpgrade linux-image-4.15.0-1120-oracleUpgrade linux-image-5.15.0-73-lowlatency-64kUpgrade linux-image-5.15.0-1035-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1030-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1092-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-5.19.0-1025-lowlatencyUpgrade linux-image-3.13.0-197-lowlatencyUpgrade linux-image-3.13.0-197-genericUpgrade linux-image-5.15.0-1031-ibmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspiUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-212-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-4.15.0-212-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-5.15.0-1036-oracleUpgrade linux-image-5.15.0-73-lowlatencyUpgrade linux-image-5.4.0-1109-azureUpgrade linux-image-5.4.0-150-generic-lpaeUpgrade linux-image-4.15.0-1151-snapdragonUpgrade linux-image-5.19.0-43-generic-64kUpgrade linux-image-5.15.0-1031-intel-iotgUpgrade linux-image-4.15.0-1141-kvmUpgrade linux-image-4.15.0-212-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-73-generic-64kUpgrade linux-image-5.19.0-1025-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1103-awsUpgrade linux-image-5.19.0-1023-ibmUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-5.15.0-1037-awsUpgrade linux-image-serverUpgrade linux-image-4.15.0-1157-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.4.0-1119-awsUpgrade linux-image-4.4.0-241-lowlatencyUpgrade linux-image-5.19.0-1024-kvmUpgrade linux-image-oemUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-5.19.0-1024-oracleUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-5.4.0-1070-gkeopUpgrade linux-image-5.4.0-1100-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1034-gkeUpgrade linux-image-6.2.0-1003-ibmUpgrade linux-image-5.17.0-1032-oemUpgrade linux-image-6.2.0-1006-raspi-nolpaeUpgrade linux-image-4.4.0-1157-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-generic-lts-trustyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1086-raspiUpgrade linux-image-6.0.0-1017-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.2.0-1005-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1102-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-5.19.0-1026-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.19.0-1027-azureUpgrade linux-image-4.15.0-1166-azureUpgrade linux-image-6.2.0-1005-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-73-generic-lpae | Apr 21, 2023 | Apr 10, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub