In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
There is a potential UAF scenario in the case of an LPI translation cache hit racing with an operation that invalidates the cache, such as a DISCARD ITS command. The root of the problem is that vgic_its_check_cache() does not elevate the refcount on the vgic_irq before dropping the lock that serializes refcount changes.
Have vgic_its_check_cache() raise the refcount on the returned vgic_irq and add the corresponding decrement after queueing the interrupt.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-5.10.209-198.812Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.148-97.158Upgrade python-perfUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfo | Mar 6, 2024 | Feb 23, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.75-99.163Upgrade kernel-tools-develUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade perf-debuginfo | Feb 17, 2025 | Feb 23, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Jul 16, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Jun 3, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Jul 1, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-libs | Jul 23, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Jul 17, 2024 | Feb 23, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jun 13, 2024 | Feb 23, 2024 |
| Suse | — | Upgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade kernel-docsUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade kernel-rt-livepatchUpgrade dtb-lgUpgrade dtb-apmUpgrade kernel-rt-extraUpgrade dtb-amlogicUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-devel | Mar 13, 2024 | Feb 23, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-5.15.0-1060-azureUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-awsUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-oemUpgrade linux-image-bluefieldUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-laptop-23.10Upgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-azure-cvmUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-5.15.0-102-generic-lpaeUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-starfiveUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.5.0-41-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-102-genericUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1057-awsUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia | Mar 12, 2024 | Feb 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub