In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
vgic_v2_parse_attr() is responsible for finding the vCPU that matches the user-provided CPUID, which (of course) may not be valid. If the ID is invalid, kvm_get_vcpu_by_id() returns NULL, which isn't handled gracefully.
Similar to the GICv3 uaccess flow, check that kvm_get_vcpu_by_id() actually returns something and fail the ioctl if not.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-rt-debug | Sep 26, 2024 | May 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.217-205.860Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-5.15.160-104.158Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | May 22, 2025 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.91-99.172Upgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade python3-perfUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-tools-devel | Jun 11, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftool | Oct 9, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-devel | Oct 2, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-rt-extraUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade dtb-apmUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade kernel-64kbUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-armUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-debug-vdsoUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-defaultUpgrade dtb-appleUpgrade kernel-symsUpgrade kernel-devel | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-202-genericUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1124-kvmUpgrade linux-image-gkeUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1120-raspiUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-4.15.0-1175-awsUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-5.4.0-1045-iotUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-5.4.0-1096-bluefieldUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-oem-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-5.4.0-202-generic-lpaeUpgrade linux-image-5.4.0-1055-xilinx-zynqmpUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1140-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-202-lowlatencyUpgrade linux-image-azureUpgrade linux-image-5.4.0-1142-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1136-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1083-ibmUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oemUpgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1135-oracleUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-40-generic | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub