In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
Advertise support for Hyper-V's SEND_IPI and SEND_IPI_EX hypercalls if and only if the local API is emulated/virtualized by KVM, and explicitly reject said hypercalls if the local APIC is emulated in userspace, i.e. don't rely on userspace to opt-in to KVM_CAP_HYPERV_ENFORCE_CPUID.
Rejecting SEND_IPI and SEND_IPI_EX fixes a NULL-pointer dereference if Hyper-V enlightenments are exposed to the guest without an in-kernel local APIC:
dump_stack+0xbe/0xfd __kasan_report.cold+0x34/0x84 kasan_report+0x3a/0x50 __apic_accept_irq+0x3a/0x5c0 kvm_hv_send_ipi.isra.0+0x34e/0x820 kvm_hv_hypercall+0x8d9/0x9d0 kvm_emulate_hypercall+0x506/0x7e0 __vmx_handle_exit+0x283/0xb60 vmx_handle_exit+0x1d/0xd0 vcpu_enter_guest+0x16b0/0x24c0 vcpu_run+0xc0/0x550 kvm_arch_vcpu_ioctl_run+0x170/0x6d0 kvm_vcpu_ioctl+0x413/0xb20 __se_sys_ioctl+0x111/0x160 do_syscal1_64+0x30/0x40 entry_SYSCALL_64_after_hwframe+0x67/0xd1
Note, checking the sending vCPU is sufficient, as the per-VM irqchip_mode can't be modified after vCPUs are created, i.e. if one vCPU has an in-kernel local APIC, then all vCPUs have an in-kernel local APIC.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perfUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.236-227.928Upgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Apr 30, 2025 | Feb 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-6.1.129-138.220Upgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel | May 14, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 17, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 13, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jun 11, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Jul 1, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade reiserfs-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-azureUpgrade dtb-lgUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kernel-develUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade kernel-debugUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade dtb-exynosUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-xilinx | Apr 9, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-nvidia-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1035-awsUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oem-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gke-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-aws-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-intelUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-azure-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-24.04 | May 20, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub