An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the #VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses could lead to arbitrary write access to kernel memory (and thus privilege escalation). This depends on a race condition through which userspace can replace an instruction before the #VC handler reads it.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-zfcpdump | Feb 23, 2024 | Oct 27, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-develUpgrade kernel-livepatch-5.15.137-91.144Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.199-190.747Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Nov 17, 2023 | Oct 27, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.61-85.141Upgrade kernelUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-libbpfUpgrade perfUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-devel | Feb 17, 2025 | Oct 27, 2023 |
| Centos_linux | — | Upgrade kernel | Jan 26, 2024 | Oct 27, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Oct 27, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 10, 2024 | Oct 27, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jan 26, 2024 | Oct 27, 2023 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jan 26, 2024 | Oct 27, 2023 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-amazonUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-symsUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kernel-docsUpgrade cluster-md-kmp-rtUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-azure | Nov 3, 2023 | Oct 27, 2023 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1013-awsUpgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-17-genericUpgrade linux-image-6.5.0-17-lowlatency-64kUpgrade linux-image-5.15.0-1056-azure-fdeUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1015-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1051-oracleUpgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-laptop-23.10Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-1010-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1047-intel-iotgUpgrade linux-image-5.15.0-1051-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-6.1.0-1027-oemUpgrade linux-image-6.5.0-1015-oracleUpgrade linux-image-5.15.0-1050-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1007-starfiveUpgrade linux-image-5.15.0-1046-raspiUpgrade linux-image-5.15.0-1050-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1036-gkeopUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1015-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-1014-oemUpgrade linux-image-5.15.0-94-generic-lpaeUpgrade linux-image-5.15.0-1056-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1044-nvidia-lowlatencyUpgrade linux-image-6.5.0-17-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-intel | Dec 6, 2023 | Oct 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub