In the Linux kernel, the following vulnerability has been resolved:
x86/hyperv: fix kexec crash due to VP assist page corruption
commit 9636be85cc5b ("x86/hyperv: Fix hyperv_pcpu_input_arg handling when CPUs go online/offline") introduces a new cpuhp state for hyperv initialization.
cpuhp_setup_state() returns the state number if state is CPUHP_AP_ONLINE_DYN or CPUHP_BP_PREPARE_DYN and 0 for all other states. For the hyperv case, since a new cpuhp state was introduced it would return 0. However, in hv_machine_shutdown(), the cpuhp_remove_state() call is conditioned upon "hyperv_init_cpuhp > 0". This will never be true and so hv_cpu_die() won't be called on all CPUs. This means the VP assist page won't be reset. When the kexec kernel tries to setup the VP assist page again, the hypervisor corrupts the memory region of the old VP assist page causing a panic in case the kexec kernel is using that memory elsewhere. This was originally fixed in commit dfe94d4086e4 ("x86/hyperv: Fix kexec panic/hang issues").
Get rid of hyperv_init_cpuhp entirely since we are no longer using a dynamic cpuhp state and use CPUHP_AP_HYPERV_ONLINE directly with cpuhp_remove_state().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Sep 27, 2024 |
| Suse | — | Upgrade dtb-sprdUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-debugUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade kernel-64kbUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade dlm-kmp-rtUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-xilinxUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade dtb-apmUpgrade dtb-broadcomUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade gfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-devel | Dec 5, 2025 | Jun 3, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-raspiUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-awsUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-24.04 | Dec 13, 2024 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub