A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This issue can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-rt-devel | Jun 6, 2024 | Jan 9, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade perfUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.210-201.852Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.149-99.161Upgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfo | Mar 6, 2024 | Jan 9, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade python3-perfUpgrade kernel-livepatch-6.1.79-99.164Upgrade perfUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade bpftool | Feb 17, 2025 | May 22, 2023 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Mar 13, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Mar 13, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | May 31, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Apr 9, 2024 | Jan 9, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 9, 2024 | May 22, 2023 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jun 6, 2024 | Jan 9, 2024 |
| Rocky_linux | — | Upgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade bpftool-debuginfo | Jun 17, 2024 | Jan 9, 2024 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade kernel-macrosUpgrade dtb-lgUpgrade dtb-marvellUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade dtb-apmUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-preemptUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-default-manUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade kselftests-kmp-default | Feb 15, 2024 | Jan 9, 2024 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1046-nvidiaUpgrade linux-image-5.15.0-1053-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1046-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1104-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.1.0-1035-oemUpgrade linux-image-5.15.0-1058-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-100-generic-64kUpgrade linux-image-5.15.0-1048-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1048-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1038-gkeopUpgrade linux-image-5.15.0-1058-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1120-awsUpgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-173-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-100-lowlatency-64kUpgrade linux-image-5.15.0-100-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1087-gkeopUpgrade linux-image-5.4.0-1067-ibmUpgrade linux-image-5.4.0-1080-bluefieldUpgrade linux-image-ibmUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1050-intel-iotgUpgrade linux-image-5.4.0-1126-azureUpgrade linux-image-5.4.0-173-lowlatencyUpgrade linux-image-5.4.0-173-genericUpgrade linux-image-5.15.0-1052-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1119-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-100-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1053-gcpUpgrade linux-image-5.15.0-100-generic-lpaeUpgrade linux-image-5.4.0-1032-iotUpgrade linux-image-oem-22.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1108-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1056-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1039-xilinx-zynqmpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1052-kvmUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-1124-gcp | Mar 7, 2024 | Jan 9, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub