In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Tear down vGIC on failed vCPU creation
If kvm_arch_vcpu_create() fails to share the vCPU page with the hypervisor, we propagate the error back to the ioctl but leave the vGIC vCPU data initialised. Note only does this leak the corresponding memory when the vCPU is destroyed but it can also lead to use-after-free if the redistributor device handling tries to walk into the vCPU.
Add the missing cleanup to kvm_arch_vcpu_create(), ensuring that the vGIC vCPU structures are destroyed on error.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.140-154.222Upgrade perf-debuginfoUpgrade perfUpgrade kernel6.12Upgrade kernel-livepatch-6.12.25-32.101Upgrade kernel-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-devel | Aug 5, 2025 | May 9, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 12, 2025 | May 9, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade dtb-amlogicUpgrade dtb-appleUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-debug-devel | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-azure-4.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-fips-5.4Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-174-generic-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-174-generic-lpaeUpgrade linux-image-4.15.0-1145-fipsUpgrade linux-image-5.15.0-1087-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1103-realtimeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1104-gcp-fipsUpgrade linux-image-fips-5.4Upgrade linux-image-aws-fips-4.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1056-nvidia-tegraUpgrade linux-image-realtime-5.15Upgrade linux-image-gcp-fips-4.15Upgrade linux-image-genericUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azureUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.4.0-1075-xilinx-zynqmpUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-aws-5.4Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-intelUpgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1110-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-kvm-5.4Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-5.4Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-aws-4.15Upgrade linux-image-aws-hweUpgrade linux-image-gcp-fipsUpgrade linux-image-ibm-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-5.15.0-174-genericUpgrade linux-image-4.15.0-2128-aws-fipsUpgrade linux-image-4.15.0-248-lowlatencyUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-4.15Upgrade linux-image-4.15.0-1153-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-raspi-5.15Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1096-intel-iot-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1045-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-4.15.0-1183-gcpUpgrade linux-image-bluefield-5.4Upgrade linux-image-5.15.0-1109-azureUpgrade linux-image-5.15.0-1104-gcpUpgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-5.4Upgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-176-generic-64kUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1103-ibmUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-1099-nvidiaUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1096-kvmUpgrade linux-image-ibm-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-4.15.0-1199-azureUpgrade linux-image-5.4.0-1161-azureUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.4.0-1061-iotUpgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1056-nvidia-tegra-rtUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-4.15Upgrade linux-image-5.15.0-1045-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-5.4Upgrade linux-image-5.15.0-174-lowlatency-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-5.4.0-1140-raspiUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-lowlatency-5.4Upgrade linux-image-oracle-5.4Upgrade linux-image-oracleUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-5.15.0-1099-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1099-intel-iotgUpgrade linux-image-4.15.0-1200-azureUpgrade linux-image-5.15.0-176-genericUpgrade linux-image-5.4.0-1155-oracleUpgrade linux-image-aws-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-4.15.0-1152-oracleUpgrade linux-image-5.15.0-1101-oracleUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.4.0-1161-azure-fipsUpgrade linux-image-4.15.0-2091-gcp-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-azure-fips-5.4Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1160-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-5.4.0-1116-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-xilinxUpgrade linux-image-raspi2Upgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oemUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-kvmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.4.0-228-lowlatencyUpgrade linux-image-4.15.0-2109-azure-fipsUpgrade linux-image-5.4.0-1160-gcp-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-5.4.0-1157-aws-fipsUpgrade linux-image-5.15.0-1068-xilinx-zynqmpUpgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-5.15.0-1104-aws-64kUpgrade linux-image-5.4.0-1157-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fips-4.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1104-awsUpgrade linux-image-5.15.0-1098-raspiUpgrade linux-image-5.15.0-174-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-20.04Upgrade linux-image-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-snapdragon-5.4Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-fipsUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-generic-lpae-5.4Upgrade linux-image-fips-5.15Upgrade linux-image-ibm-5.4Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1131-fipsUpgrade linux-image-gcp-fips-5.4Upgrade linux-image-4.15.0-248-genericUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-4.15.0-1172-kvmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-virtual-5.15Upgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.4.0-1144-kvmUpgrade linux-image-5.4.0-228-genericUpgrade linux-image-generic-5.4Upgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-5.4Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-5.15.0-174-fipsUpgrade linux-image-5.15.0-1104-aws-fipsUpgrade linux-image-5.15.0-1098-ibmUpgrade linux-image-4.15.0-1190-awsUpgrade linux-image-generic-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.4.0-228-generic-lpaeUpgrade linux-image-5.15.0-1100-gke | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 9, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub