A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This issue can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-core | Jun 6, 2024 | Jan 9, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.149-99.161Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-5.10.210-201.852Upgrade bpftoolUpgrade python-perfUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-devel | Mar 6, 2024 | Jan 9, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perfUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extra | Feb 17, 2025 | May 22, 2023 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Mar 13, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Mar 13, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | May 31, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Apr 9, 2024 | Jan 9, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 9, 2024 | May 22, 2023 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jun 6, 2024 | Jan 9, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-develUpgrade perfUpgrade kernel-rtUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headers | Jun 17, 2024 | Jan 9, 2024 |
| Suse | — | Upgrade dtb-armUpgrade gfs2-kmp-azureUpgrade kernel-default-manUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade dtb-caviumUpgrade kernel-preempt-develUpgrade dtb-mediatekUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-alteraUpgrade dtb-lgUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade kernel-preemptUpgrade kernel-azure-baseUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade dtb-qcomUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-default-develUpgrade kernel-default-optional | Feb 15, 2024 | Jan 9, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1039-xilinx-zynqmpUpgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1108-kvmUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1056-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1124-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1052-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-gkeUpgrade linux-image-5.4.0-173-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1050-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1052-gkeUpgrade linux-image-5.4.0-1126-azureUpgrade linux-image-5.15.0-100-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-100-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1119-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1046-nvidiaUpgrade linux-image-5.15.0-1053-oracleUpgrade linux-image-5.15.0-1048-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-100-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1038-gkeopUpgrade linux-image-5.15.0-1048-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidiaUpgrade linux-image-virtualUpgrade linux-image-5.15.0-100-genericUpgrade linux-image-oemUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-5.4.0-1104-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1058-azureUpgrade linux-image-5.4.0-1120-awsUpgrade linux-image-5.15.0-1058-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1032-iotUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1080-bluefieldUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-100-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1053-gcpUpgrade linux-image-5.4.0-1087-gkeopUpgrade linux-image-5.4.0-173-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1067-ibmUpgrade linux-image-5.4.0-173-genericUpgrade linux-image-generic-lpae | Mar 7, 2024 | Jan 9, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub