In the Linux kernel, the following vulnerability has been resolved:
x86/hyperv: fix kexec crash due to VP assist page corruption
commit 9636be85cc5b ("x86/hyperv: Fix hyperv_pcpu_input_arg handling when CPUs go online/offline") introduces a new cpuhp state for hyperv initialization.
cpuhp_setup_state() returns the state number if state is CPUHP_AP_ONLINE_DYN or CPUHP_BP_PREPARE_DYN and 0 for all other states. For the hyperv case, since a new cpuhp state was introduced it would return 0. However, in hv_machine_shutdown(), the cpuhp_remove_state() call is conditioned upon "hyperv_init_cpuhp > 0". This will never be true and so hv_cpu_die() won't be called on all CPUs. This means the VP assist page won't be reset. When the kexec kernel tries to setup the VP assist page again, the hypervisor corrupts the memory region of the old VP assist page causing a panic in case the kexec kernel is using that memory elsewhere. This was originally fixed in commit dfe94d4086e4 ("x86/hyperv: Fix kexec panic/hang issues").
Get rid of hyperv_init_cpuhp entirely since we are no longer using a dynamic cpuhp state and use CPUHP_AP_HYPERV_ONLINE directly with cpuhp_remove_state().
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 15, 2025 | Sep 27, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade kernel-default-develUpgrade dtb-xilinxUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-renesasUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade kernel-source-rtUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade dtb-exynosUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-debug-devel | Dec 5, 2025 | Jun 3, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-generic-hwe-22.04 | Dec 13, 2024 | Sep 27, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub