A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg() function. This issue can allow local privileged users to read some kernel memory contents when reading from the /dev/vhost-net device file.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headers | Jun 6, 2024 | Jan 9, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-headersUpgrade kernel-livepatch-5.15.149-99.161Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel-livepatch-5.10.210-201.852Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftool-debuginfo | Mar 6, 2024 | Jan 9, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade python3-perfUpgrade perfUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernelUpgrade bpftool-debuginfo | Feb 17, 2025 | May 22, 2023 |
| Debian | — | Upgrade linux | May 8, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Mar 13, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Mar 13, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | May 31, 2024 | Jan 9, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Apr 9, 2024 | Jan 9, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Apr 9, 2024 | May 22, 2023 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jun 6, 2024 | Jan 9, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-rtUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-devel | Jun 17, 2024 | Jan 9, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade kernel-debugUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azure-vdsoUpgrade kernel-sourceUpgrade dtb-appleUpgrade kernel-debug-livepatch-develUpgrade dtb-broadcomUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade kernel-macrosUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade dtb-apmUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade kernel-preemptUpgrade kernel-azure-baseUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-default-manUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade dtb-rockchipUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade kernel-preempt-develUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-vdso | Feb 15, 2024 | Jan 9, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1052-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1056-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1039-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1108-kvmUpgrade linux-image-5.4.0-1124-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04cUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1032-iotUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1052-gkeUpgrade linux-image-5.15.0-100-generic-lpaeUpgrade linux-image-5.15.0-1053-oracleUpgrade linux-image-intelUpgrade linux-image-intel-iotgUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1126-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-173-genericUpgrade linux-image-5.4.0-1087-gkeopUpgrade linux-image-5.4.0-1067-ibmUpgrade linux-image-5.4.0-173-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-173-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1050-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1080-bluefieldUpgrade linux-image-virtualUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-100-generic-64kUpgrade linux-image-5.15.0-1038-gkeopUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1048-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-100-lowlatencyUpgrade linux-image-5.15.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1058-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-5.15.0-100-genericUpgrade linux-image-5.4.0-1120-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1119-oracleUpgrade linux-image-5.15.0-1058-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1046-nvidiaUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1053-gcpUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-5.15.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1048-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1104-raspi | Mar 7, 2024 | Jan 9, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub