In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
On a system with a GICv3, if a guest hasn't been configured with GICv3 and that the host is not capable of GICv2 emulation, a write to any of the ICC_*SGI*_EL1 registers is trapped to EL2.
We therefore try to emulate the SGI access, only to hit a NULL pointer as no private interrupt is allocated (no GIC, remember?).
The obvious fix is to give the guest what it deserves, in the shape of a UNDEF exception.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.15.166-111.163Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.225-213.878Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Sep 27, 2024 | Sep 13, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade python3-perfUpgrade perf | Feb 17, 2025 | Sep 13, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Dec 12, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Dec 12, 2024 | Sep 13, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Sep 13, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 13, 2024 |
| Suse | — | Upgrade kernel-rt-livepatchUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade cluster-md-kmp-rtUpgrade dtb-amlogicUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade dtb-alteraUpgrade dtb-armUpgrade kernel-rtUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade kernel-default-manUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade kernel-debugUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-renesasUpgrade kernel-symsUpgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-azure-baseUpgrade kernel-defaultUpgrade dtb-freescaleUpgrade dtb-amdUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-rtUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdso | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-awsUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1019-gcp | Nov 12, 2024 | Sep 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub