In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
vgic_v2_parse_attr() is responsible for finding the vCPU that matches the user-provided CPUID, which (of course) may not be valid. If the ID is invalid, kvm_get_vcpu_by_id() returns NULL, which isn't handled gracefully.
Similar to the GICv3 uaccess flow, check that kvm_get_vcpu_by_id() actually returns something and fail the ioctl if not.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules | Sep 26, 2024 | May 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.160-104.158Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.217-205.860Upgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-tools-devel | May 22, 2025 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.91-99.172Upgrade kernel-tools-debuginfoUpgrade kernel-headers | Jun 11, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Oct 9, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 30, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Oct 2, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade dtb-alteraUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-armUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade dtb-nvidiaUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-develUpgrade dtb-socionextUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade kernel-rtUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kb | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-5.4.0-202-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1055-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-5.4.0-1120-raspiUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1183-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-5.4.0-1124-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-4.15.0-1175-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-5.4.0-1140-gcpUpgrade linux-image-bluefieldUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1096-bluefieldUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-202-generic-lpaeUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-5.4.0-1045-iotUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-intelUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1136-awsUpgrade linux-image-5.4.0-1142-azureUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-azureUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-aws-hweUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.4.0-1083-ibmUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1135-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-202-lowlatencyUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-18.04 | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub