In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
vgic_v2_parse_attr() is responsible for finding the vCPU that matches the user-provided CPUID, which (of course) may not be valid. If the ID is invalid, kvm_get_vcpu_by_id() returns NULL, which isn't handled gracefully.
Similar to the GICv3 uaccess flow, check that kvm_get_vcpu_by_id() actually returns something and fail the ioctl if not.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-core | Sep 26, 2024 | May 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade python-perfUpgrade kernel-livepatch-5.10.217-205.860Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.160-104.158Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel | May 22, 2025 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-6.1.91-99.172Upgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-modules-extraUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python3-perfUpgrade perf | Jun 11, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Oct 9, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-core | Oct 2, 2024 | May 30, 2024 |
| Suse | — | Upgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-alteraUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade dtb-amdUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade dtb-armUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade dlm-kmp-rtUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade dtb-amazonUpgrade kernel-rt-develUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade kernel-rt-livepatchUpgrade dlm-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade dtb-apmUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade dtb-rockchipUpgrade kernel-default-livepatchUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade dtb-amlogic | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-oemUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.4.0-202-lowlatencyUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-gkeopUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-5.4.0-1135-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1083-ibmUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-5.4.0-1136-awsUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-intelUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1142-azureUpgrade linux-image-aws-hweUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1055-xilinx-zynqmpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1096-bluefieldUpgrade linux-image-5.4.0-1045-iotUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1067-awsUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.4.0-1140-gcpUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-118-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1124-kvmUpgrade linux-image-5.4.0-202-genericUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1120-raspiUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1183-azureUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-5.4.0-202-generic-lpaeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-4.15.0-1175-awsUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1064-kvm | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub