In the Linux kernel, the following vulnerability has been resolved:
drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
In the "pmcmd_ioctl" function, three memory objects allocated by kmalloc are initialized by "hcall_get_cpu_state", which are then copied to user space. The initializer is indeed implemented in "acrn_hypercall2" (arch/x86/include/asm/acrn.h). There is a risk of information leakage due to uninitialized bytes.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Apr 1, 2025 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-symsUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade dtb-apmUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-defaultUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-obs-qaUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade dtb-amazonUpgrade dtb-renesasUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade kernel-develUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-develUpgrade dtb-nvidiaUpgrade dtb-armUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-cavium | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-azure-cvmUpgrade linux-image-gcpUpgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.8.0-1038-azureUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-azure-fde-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-intelUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1015-awsUpgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-140-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-azure-fde-6.11Upgrade linux-image-6.8.0-84-genericUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-azure-fipsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fde-edgeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-azure-6.11Upgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-ibm-6.8Upgrade linux-image-ibmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1039-awsUpgrade linux-image-lowlatency-6.11Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-5.15.0-142-generic-lpae | May 20, 2025 | Apr 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub