An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. Incorrect access checking in the #VC handler and instruction emulation of the SEV-ES emulation of MMIO accesses could lead to arbitrary write access to kernel memory (and thus privilege escalation). This depends on a race condition through which userspace can replace an instruction before the #VC handler reads it.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-core | Feb 23, 2024 | Oct 27, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.199-190.747Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.137-91.144Upgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64 | Nov 17, 2023 | Oct 27, 2023 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade perfUpgrade kernel-livepatch-6.1.61-85.141Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel | Feb 17, 2025 | Oct 27, 2023 |
| Centos_linux | — | Upgrade kernel | Jan 26, 2024 | Oct 27, 2023 |
| Debian | — | Upgrade linux | Jan 8, 2024 | Oct 27, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Jan 10, 2024 | Oct 27, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jan 26, 2024 | Oct 27, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jan 26, 2024 | Oct 27, 2023 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade dtb-caviumUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-rt_debugUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade dtb-appleUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade kernel-rt-livepatchUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade kernel-syms-azure | Nov 3, 2023 | Oct 27, 2023 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.5.0-1010-raspiUpgrade linux-image-5.15.0-1050-gkeUpgrade linux-image-gcpUpgrade linux-image-5.15.0-94-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1056-azureUpgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1013-awsUpgrade linux-image-5.15.0-1044-nvidia-lowlatencyUpgrade linux-image-6.5.0-17-lowlatencyUpgrade linux-image-5.15.0-94-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-17-generic-64kUpgrade linux-image-5.15.0-1046-ibmUpgrade linux-image-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1053-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1044-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-5.15.0-94-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1013-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-1009-laptopUpgrade linux-image-intelUpgrade linux-image-5.15.0-94-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-94-genericUpgrade linux-image-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-17-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1056-azure-fdeUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1051-gcpUpgrade linux-image-6.5.0-1007-starfiveUpgrade linux-image-oem-22.04cUpgrade linux-image-6.1.0-1027-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-1015-azureUpgrade linux-image-5.15.0-1048-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.5.0-1014-oemUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1036-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1015-oracleUpgrade linux-image-5.15.0-1046-raspiUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-oem-22.04d | Dec 6, 2023 | Oct 27, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 27, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub