In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Tear down vGIC on failed vCPU creation
If kvm_arch_vcpu_create() fails to share the vCPU page with the hypervisor, we propagate the error back to the ioctl but leave the vGIC vCPU data initialised. Note only does this leak the corresponding memory when the vCPU is destroyed but it can also lead to use-after-free if the redistributor device handling tries to walk into the vCPU.
Add the missing cleanup to kvm_arch_vcpu_create(), ensuring that the vGIC vCPU structures are destroyed on error.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python3-perf6.12Upgrade python3-perf6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-debuginfoUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-develUpgrade perfUpgrade kernel6.12Upgrade kernel-livepatch-6.12.25-32.101Upgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64 | Aug 5, 2025 | May 9, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 12, 2025 | May 9, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade kernel-rt-livepatchUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade dtb-lgUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade dtb-rockchipUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade dtb-appleUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-obs-qaUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-default-vdso | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1110-azureUpgrade linux-image-5.4.0-1075-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04Upgrade linux-image-gke-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-azureUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-4.15.0-2128-aws-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-aws-5.4Upgrade linux-image-intelUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.4.0-1161-azureUpgrade linux-image-5.15.0-174-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-1104-gcp-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1087-gkeopUpgrade linux-image-5.15.0-1056-nvidia-tegraUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-4.15.0-1145-fipsUpgrade linux-image-4.15.0-1199-azureUpgrade linux-image-4.15.0-1183-gcpUpgrade linux-image-5.15.0-1104-gcpUpgrade linux-image-azure-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-4.15.0-1153-oracleUpgrade linux-image-fips-5.4Upgrade linux-image-5.15.0-1056-nvidia-tegra-rtUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-5.15.0-1096-intel-iot-realtimeUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1109-azureUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-5.4Upgrade linux-image-aws-lts-22.04Upgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-5.15.0-176-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1096-kvmUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1061-iotUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-174-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1099-nvidiaUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-fips-5.4Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-5.4.0-1103-ibmUpgrade linux-image-gcp-64kUpgrade linux-image-gke-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-bluefield-5.4Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-1103-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1045-nvidia-tegra-igx-rtUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-174-generic-lpaeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-4.15Upgrade linux-image-oem-22.04cUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-5.4Upgrade linux-image-4.15.0-248-lowlatencyUpgrade linux-image-aws-4.15Upgrade linux-image-realtime-5.15Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-nvidiaUpgrade linux-image-kvm-5.4Upgrade linux-image-gcp-4.15Upgrade linux-image-aws-fips-4.15Upgrade linux-image-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.4.0-228-generic-lpaeUpgrade linux-image-5.4.0-1144-kvmUpgrade linux-image-virtual-5.15Upgrade linux-image-virtualUpgrade linux-image-aws-fipsUpgrade linux-image-5.4.0-1160-gcp-fipsUpgrade linux-image-awsUpgrade linux-image-5.4.0-228-lowlatencyUpgrade linux-image-4.15.0-2109-azure-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-20.04Upgrade linux-image-aws-5.15Upgrade linux-image-ibm-5.4Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-fips-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-raspi2Upgrade linux-image-oemUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.4.0-1157-awsUpgrade linux-image-5.15.0-174-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1160-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-fips-5.4Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1045-nvidia-tegra-igxUpgrade linux-image-5.4.0-1140-raspiUpgrade linux-image-4.15.0-1172-kvmUpgrade linux-image-5.4.0-1116-bluefieldUpgrade linux-image-4.15.0-248-genericUpgrade linux-image-5.4.0-1131-fipsUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1104-awsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1098-raspiUpgrade linux-image-lowlatency-6.8Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1104-aws-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-5.15.0-174-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-1068-xilinx-zynqmpUpgrade linux-image-5.15.0-1100-gkeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1190-awsUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1104-aws-64kUpgrade linux-image-azure-fips-4.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-5.4.0-1157-aws-fipsUpgrade linux-image-azure-fips-5.4Upgrade linux-image-xilinxUpgrade linux-image-kvmUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-generic-5.15Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-5.15.0-1098-ibmUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-4.15.0-1152-oracleUpgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-5.4Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-174-lowlatency-64kUpgrade linux-image-5.15.0-1101-oracleUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-lpae-5.4Upgrade linux-image-snapdragon-5.4Upgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-fips-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1099-nvidia-lowlatencyUpgrade linux-image-5.15.0-1099-intel-iotgUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-5.4.0-1155-oracleUpgrade linux-image-5.15.0-176-genericUpgrade linux-image-4.15.0-1200-azureUpgrade linux-image-5.4.0-1161-azure-fipsUpgrade linux-image-aws-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-realtimeUpgrade linux-image-oracle-5.4Upgrade linux-image-oracle-4.15Upgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-5.4Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-4.15.0-2091-gcp-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-5.4Upgrade linux-image-5.4.0-228-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-5.4Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gkeop-5.15 | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub