In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
vgic_v2_parse_attr() is responsible for finding the vCPU that matches the user-provided CPUID, which (of course) may not be valid. If the ID is invalid, kvm_get_vcpu_by_id() returns NULL, which isn't handled gracefully.
Similar to the GICv3 uaccess flow, check that kvm_get_vcpu_by_id() actually returns something and fail the ioctl if not.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-coreUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-devel | Sep 26, 2024 | May 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.160-104.158Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.217-205.860Upgrade kernel-debuginfo | May 22, 2025 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade perfUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.91-99.172 | Jun 11, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Oct 9, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 30, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade perfUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-debuginfo | Oct 2, 2024 | May 30, 2024 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-lgUpgrade dlm-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-source-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade dtb-rockchipUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade kernel-macrosUpgrade dtb-marvellUpgrade dtb-apmUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-amazonUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-defaultUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-mediatekUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade dtb-alteraUpgrade dtb-amdUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-symsUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-debugUpgrade dtb-sprdUpgrade kernel-rt-devel | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-oemUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-genericUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-aws-hweUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1135-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-202-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-intelUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1136-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1083-ibmUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1142-azureUpgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-5.4.0-1140-gcpUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-5.4.0-1124-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-118-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-5.4.0-202-genericUpgrade linux-image-ibmUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1120-raspiUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-202-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1055-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1096-bluefieldUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-5.4.0-1045-iotUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-4.15.0-1175-awsUpgrade linux-image-oracle-lts-22.04 | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub