In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
vgic_v2_parse_attr() is responsible for finding the vCPU that matches the user-provided CPUID, which (of course) may not be valid. If the ID is invalid, kvm_get_vcpu_by_id() returns NULL, which isn't handled gracefully.
Similar to the GICv3 uaccess flow, check that kvm_get_vcpu_by_id() actually returns something and fail the ioctl if not.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-debug-devel | Sep 26, 2024 | May 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-5.15.160-104.158Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.217-205.860Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-devel | May 22, 2025 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-tools-develUpgrade python3-perfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.91-99.172Upgrade kernelUpgrade kernel-headersUpgrade python3-perf-debuginfo | Jun 11, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 9, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-rt-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules | Oct 2, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade dtb-amazonUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade kernel-azure-extraUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-azure-livepatch-develUpgrade dtb-broadcomUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuild | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-118-genericUpgrade linux-image-gke-5.15Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-5.4.0-1120-raspiUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-202-genericUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-5.4.0-1096-bluefieldUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-5.4.0-1045-iotUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1140-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1055-xilinx-zynqmpUpgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1124-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-202-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1175-awsUpgrade linux-image-5.4.0-1083-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-202-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1135-oracleUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-genericUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-5.4.0-1136-awsUpgrade linux-image-5.4.0-1142-azureUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-4.15.0-231-lowlatency | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub