In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
On a system with a GICv3, if a guest hasn't been configured with GICv3 and that the host is not capable of GICv2 emulation, a write to any of the ICC_*SGI*_EL1 registers is trapped to EL2.
We therefore try to emulate the SGI access, only to hit a NULL pointer as no private interrupt is allocated (no GIC, remember?).
The obvious fix is to give the guest what it deserves, in the shape of a UNDEF exception.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.225-213.878Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernelUpgrade kernel-livepatch-5.15.166-111.163Upgrade perf | Sep 27, 2024 | Sep 13, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade python3-perfUpgrade perfUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool | Feb 17, 2025 | Sep 13, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Dec 12, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Dec 12, 2024 | Sep 13, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Sep 13, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 13, 2024 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-azure-baseUpgrade dtb-lgUpgrade kernel-default-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-azureUpgrade dtb-freescaleUpgrade kernel-64kb-livepatch-develUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-develUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade dtb-mediatekUpgrade dtb-armUpgrade dtb-alteraUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade kernel-rt-extra | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-intelUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1075-azure | Nov 12, 2024 | Sep 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub