In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
vgic_v2_parse_attr() is responsible for finding the vCPU that matches the user-provided CPUID, which (of course) may not be valid. If the ID is invalid, kvm_get_vcpu_by_id() returns NULL, which isn't handled gracefully.
Similar to the GICv3 uaccess flow, check that kvm_get_vcpu_by_id() actually returns something and fail the ioctl if not.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-develUpgrade kernel-zfcpdump-core | Sep 26, 2024 | May 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.217-205.860Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.160-104.158Upgrade kernel-develUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade python-perf-debuginfo | May 22, 2025 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-develUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.91-99.172Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-headers | Jun 11, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftool | Oct 9, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 30, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-debug-core | Oct 2, 2024 | May 30, 2024 |
| Suse | — | Upgrade dtb-lgUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade kernel-symsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-develUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-armUpgrade kernel-debugUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade kernel-docsUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rt | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.4.0-1135-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1142-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1136-awsUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-202-lowlatencyUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-intelUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-oemUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.4.0-1083-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-202-genericUpgrade linux-image-4.15.0-1183-azureUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1055-xilinx-zynqmpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-4.15.0-1175-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1140-gcpUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-5.4.0-1045-iotUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-raspi2Upgrade linux-image-5.4.0-202-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.4.0-1096-bluefieldUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1120-raspiUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-5.4.0-1124-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1070-azure-fde | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub