In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
Grab kvm->srcu when processing KVM_SET_VCPU_EVENTS, as KVM will forcibly leave nested VMX/SVM if SMM mode is being toggled, and leaving nested VMX reads guest memory.
Note, kvm_vcpu_ioctl_x86_set_vcpu_events() can also be called from KVM_RUN via sync_regs(), which already holds SRCU. I.e. trying to precisely use kvm_vcpu_srcu_read_lock() around the problematic SMM code would cause problems. Acquiring SRCU isn't all that expensive, so for simplicity, grab it unconditionally for KVM_SET_VCPU_EVENTS.
============================= WARNING: suspicious RCU usage 6.10.0-rc7-332d2c1d713e-next-vm #552 Not tainted ----------------------------- include/linux/kvm_host.h:1027 suspicious rcu_dereference_check() usage!
other info that might help us debug this:
rcu_scheduler_active = 2, debug_locks = 1 1 lock held by repro/1071: #0: ffff88811e424430 (&vcpu->mutex){+.+.}-{3:3}, at: kvm_vcpu_ioctl+0x7d/0x970 [kvm]
stack backtrace: CPU: 15 PID: 1071 Comm: repro Not tainted 6.10.0-rc7-332d2c1d713e-next-vm #552 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 Call Trace: <TASK> dump_stack_lvl+0x7f/0x90 lockdep_rcu_suspicious+0x13f/0x1a0 kvm_vcpu_gfn_to_memslot+0x168/0x190 [kvm] kvm_vcpu_read_guest+0x3e/0x90 [kvm] nested_vmx_load_msr+0x6b/0x1d0 [kvm_intel] load_vmcs12_host_state+0x432/0xb40 [kvm_intel] vmx_leave_nested+0x30/0x40 [kvm_intel] kvm_vcpu_ioctl_x86_set_vcpu_events+0x15d/0x2b0 [kvm] kvm_arch_vcpu_ioctl+0x1107/0x1750 [kvm] ? mark_held_locks+0x49/0x70 ? kvm_vcpu_ioctl+0x7d/0x970 [kvm] ? kvm_vcpu_ioctl+0x497/0x970 [kvm] kvm_vcpu_ioctl+0x497/0x970 [kvm] ? lock_acquire+0xba/0x2d0 ? find_held_lock+0x2b/0x80 ? do_user_addr_fault+0x40c/0x6f0 ? lock_release+0xb7/0x270 __x64_sys_ioctl+0x82/0xb0 do_syscall_64+0x6c/0x170 entry_SYSCALL_64_after_hwframe+0x4b/0x53 RIP: 0033:0x7ff11eb1b539 </TASK>
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-livepatch-5.10.234-225.917Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfo | Mar 14, 2025 | Sep 27, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.111-120.187Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-libbpf-devel | Mar 10, 2025 | Sep 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Feb 11, 2025 | Sep 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Feb 11, 2025 | Sep 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 12, 2026 | Sep 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 27, 2024 |
| Suse | — | Upgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-renesasUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-rt_debugUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade kernel-symsUpgrade kernel-debug-develUpgrade kernel-macrosUpgrade dtb-socionextUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-azureUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-64kb-optionalUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-debug-vdso | Dec 5, 2025 | Oct 9, 2024 |
| Ubuntu | — | Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-azure-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1102-realtimeUpgrade linux-image-5.15.0-1103-gcp-fipsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1099-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1098-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1098-intel-iotgUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-173-lowlatency-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-awsUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1094-intel-iot-realtimeUpgrade linux-image-ibm-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1086-gkeopUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-173-genericUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1067-xilinx-zynqmpUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1103-aws-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-generic-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1100-oracleUpgrade linux-image-5.15.0-1055-nvidia-tegra-rtUpgrade linux-image-5.15.0-1044-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1103-aws-fipsUpgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1044-nvidia-tegra-igxUpgrade linux-image-5.15.0-1097-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-5.15.0-173-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-1103-awsUpgrade linux-image-5.15.0-1103-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-173-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1109-azureUpgrade linux-image-5.15.0-1098-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1095-kvmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-173-generic-64kUpgrade linux-image-5.15.0-1055-nvidia-tegraUpgrade linux-image-5.15.0-173-fipsUpgrade linux-image-ibmUpgrade linux-image-genericUpgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-nvidia-tegra-rt | Dec 13, 2024 | Sep 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub