A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This issue can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade perf | Jun 6, 2024 | Jan 9, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.210-201.852Upgrade kernel-toolsUpgrade bpftoolUpgrade python-perfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.149-99.161Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.343-259.562 | Mar 6, 2024 | Jan 9, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | May 22, 2023 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Mar 13, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perf | Mar 13, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | May 31, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Apr 9, 2024 | Jan 9, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Apr 9, 2024 | May 22, 2023 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 6, 2024 | Jan 9, 2024 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-debuginfo | Jun 17, 2024 | Jan 9, 2024 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade dlm-kmp-azureUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default-manUpgrade dtb-armUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade dtb-sprdUpgrade dtb-amazonUpgrade kernel-64kbUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade kernel-symsUpgrade kernel-azure-baseUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade dtb-marvellUpgrade dtb-lgUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade dtb-amlogicUpgrade kernel-preemptUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kb | Feb 15, 2024 | Jan 9, 2024 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1056-awsUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1108-kvmUpgrade linux-image-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1124-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1052-kvmUpgrade linux-image-5.4.0-1039-xilinx-zynqmpUpgrade linux-image-azure-fdeUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1038-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1048-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-100-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1046-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-genericUpgrade linux-image-5.15.0-100-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-173-generic-lpaeUpgrade linux-image-5.4.0-173-genericUpgrade linux-image-5.4.0-1067-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-173-lowlatencyUpgrade linux-image-5.4.0-1087-gkeopUpgrade linux-image-5.4.0-1126-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-5.15.0-100-generic-64kUpgrade linux-image-5.15.0-1048-ibmUpgrade linux-image-5.15.0-1058-azure-fdeUpgrade linux-image-5.15.0-1052-gkeUpgrade linux-image-5.4.0-1032-iotUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.1.0-1035-oemUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1120-awsUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.15.0-100-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-100-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-oem-22.04aUpgrade linux-image-intelUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1050-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1053-gcpUpgrade linux-image-5.15.0-1058-azureUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1104-raspiUpgrade linux-image-5.4.0-1080-bluefieldUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1119-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1053-oracle | Mar 7, 2024 | Jan 9, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub