In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
On a system with a GICv3, if a guest hasn't been configured with GICv3 and that the host is not capable of GICv2 emulation, a write to any of the ICC_*SGI*_EL1 registers is trapped to EL2.
We therefore try to emulate the SGI access, only to hit a NULL pointer as no private interrupt is allocated (no GIC, remember?).
The obvious fix is to give the guest what it deserves, in the shape of a UNDEF exception.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-5.10.225-213.878Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.166-111.163Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel-tools-debuginfo | Sep 27, 2024 | Sep 13, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade perfUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-devel | Feb 17, 2025 | Sep 13, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Dec 12, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelists | Dec 12, 2024 | Sep 13, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Sep 13, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 13, 2024 |
| Suse | — | Upgrade kernel-rt_debug-livepatch-develUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade dtb-apmUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-default-manUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade kernel-azure-baseUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade dtb-amazonUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade dtb-armUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade kernel-rtUpgrade dtb-qcomUpgrade kernel-macrosUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-default-extraUpgrade kernel-debug-vdso | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-genericUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1020-azure-fde | Nov 12, 2024 | Sep 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub