In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Fix circular locking dependency
The rule inside kvm enforces that the vcpu->mutex is taken *inside* kvm->lock. The rule is violated by the pkvm_create_hyp_vm() which acquires the kvm->lock while already holding the vcpu->mutex lock from kvm_vcpu_ioctl(). Avoid the circular locking dependency altogether by protecting the hyp vm handle with the config_lock, much like we already do for other forms of VM-scoped data.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Apr 3, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-exynosUpgrade kselftests-kmp-defaultUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-azure-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade dtb-nvidiaUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-default-vdsoUpgrade dtb-armUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-amazonUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade dtb-lgUpgrade dtb-socionextUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debugUpgrade kernel-azure-vdso | Aug 8, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1023-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-genericUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-starfiveUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-nvidia-6.5Upgrade linux-image-nvidia-64k-6.5 | Jul 15, 2024 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub