In the Linux kernel, the following vulnerability has been resolved:
x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
Xen doesn't offer MSR_FAM10H_MMIO_CONF_BASE to all guests. This results in the following warning:
unchecked MSR access error: RDMSR from 0xc0010058 at rIP: 0xffffffff8101d19f (xen_do_read_msr+0x7f/0xa0) Call Trace: xen_read_msr+0x1e/0x30 amd_get_mmconfig_range+0x2b/0x80 quirk_amd_mmconfig_area+0x28/0x100 pnp_fixup_device+0x39/0x50 __pnp_add_device+0xf/0x150 pnp_add_device+0x3d/0x100 pnpacpi_add_device_handler+0x1f9/0x280 acpi_ns_get_device_callback+0x104/0x1c0 acpi_ns_walk_namespace+0x1d0/0x260 acpi_get_devices+0x8a/0xb0 pnpacpi_init+0x50/0x80 do_one_initcall+0x46/0x2e0 kernel_init_freeable+0x1da/0x2f0 kernel_init+0x16/0x1b0 ret_from_fork+0x30/0x50 ret_from_fork_asm+0x1b/0x30
based on quirks for a "PNP0c01" device. Treating MMCFG as disabled is the right course of action, so no change is needed there.
This was most likely exposed by fixing the Xen MSR accessors to not be silently-safe.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.131-143.221Upgrade kernel-libbpf-devel | Jun 11, 2025 | Apr 1, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Apr 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 1, 2025 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-default-extraUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade dtb-amdUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-rtUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-devel | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-azureUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-azure-nvidiaUpgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.11.0-1015-awsUpgrade linux-image-aws-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-azure-fde-edgeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1039-awsUpgrade linux-image-lowlatency-6.11Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-84-genericUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-virtualUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-6.8.0-1038-azureUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-gkeUpgrade linux-image-azure-6.11Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1036-azureUpgrade linux-image-ibmUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-fde-6.11Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-oracleUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-genericUpgrade linux-image-azure-fde-6.8 | Jun 26, 2025 | Apr 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub