In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
On a system with a GICv3, if a guest hasn't been configured with GICv3 and that the host is not capable of GICv2 emulation, a write to any of the ICC_*SGI*_EL1 registers is trapped to EL2.
We therefore try to emulate the SGI access, only to hit a NULL pointer as no private interrupt is allocated (no GIC, remember?).
The obvious fix is to give the guest what it deserves, in the shape of a UNDEF exception.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.166-111.163Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.225-213.878Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool | Sep 27, 2024 | Sep 13, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-livepatch-6.1.109-118.189Upgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf | Feb 17, 2025 | Sep 13, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Dec 12, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Dec 12, 2024 | Sep 13, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Sep 13, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 13, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade kernel-macrosUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade kernel-rt-extraUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-apmUpgrade kernel-azure-baseUpgrade kernel-default-develUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade dtb-renesasUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade dtb-lgUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-default-manUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade dtb-hisilicon | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-intelUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-kvm | Nov 12, 2024 | Sep 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub