In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
There is a potential UAF scenario in the case of an LPI translation cache hit racing with an operation that invalidates the cache, such as a DISCARD ITS command. The root of the problem is that vgic_its_check_cache() does not elevate the refcount on the vgic_irq before dropping the lock that serializes refcount changes.
Have vgic_its_check_cache() raise the refcount on the returned vgic_irq and add the corresponding decrement after queueing the interrupt.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-5.10.209-198.812Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.15.148-97.158Upgrade kernel-debuginfo-common-x86_64 | Mar 6, 2024 | Feb 23, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.75-99.163Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-headers | Feb 17, 2025 | Feb 23, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Jul 16, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Jun 3, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jul 1, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-headersUpgrade python-perfUpgrade kernel-tools-libs | Jul 23, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 17, 2024 | Feb 23, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 13, 2024 | Feb 23, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade dtb-caviumUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade dtb-apmUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade kernel-azure-optionalUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kselftests-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade kernel-64kbUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azure | Mar 13, 2024 | Feb 23, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1060-azureUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-oracleUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-gcpUpgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-bluefieldUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1129-azureUpgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1057-awsUpgrade linux-image-oracle-64kUpgrade linux-image-intelUpgrade linux-image-raspi2Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-5.15.0-102-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.5.0-1022-azureUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-starfiveUpgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-102-genericUpgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-ibmUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeop-5.4 | Mar 12, 2024 | Feb 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub