In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Tear down vGIC on failed vCPU creation
If kvm_arch_vcpu_create() fails to share the vCPU page with the hypervisor, we propagate the error back to the ioctl but leave the vGIC vCPU data initialised. Note only does this leak the corresponding memory when the vCPU is destroyed but it can also lead to use-after-free if the redistributor device handling tries to walk into the vCPU.
Add the missing cleanup to kvm_arch_vcpu_create(), ensuring that the vGIC vCPU structures are destroyed on error.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel6.12-debuginfoUpgrade kernel-headersUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel6.12-modules-extraUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade perf-debuginfoUpgrade perfUpgrade kernel6.12Upgrade kernel-livepatch-6.12.25-32.101 | Aug 5, 2025 | May 9, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 12, 2025 | May 9, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-rt-optionalUpgrade dtb-appleUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade dtb-qcomUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kernel-azureUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade kernel-rt-livepatchUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade dtb-sprdUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade dtb-allwinner | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-5.15Upgrade linux-image-raspiUpgrade linux-image-azure-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-fips-4.15Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-176-generic-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-174-genericUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1109-azureUpgrade linux-image-5.15.0-1096-kvmUpgrade linux-image-5.15.0-1104-gcpUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-5.15.0-1099-nvidiaUpgrade linux-image-aws-hweUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.4.0-1061-iotUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.4.0-1103-ibmUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-aws-4.15Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-248-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1161-azureUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gke-6.8Upgrade linux-image-kvm-5.4Upgrade linux-image-gcp-5.4Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-gke-5.15Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1096-intel-iot-realtimeUpgrade linux-image-nvidia-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-5.15.0-1045-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-174-generic-lpaeUpgrade linux-image-fips-5.4Upgrade linux-image-gcp-64kUpgrade linux-image-raspi-5.4Upgrade linux-image-bluefield-5.4Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.4.0-1075-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-2128-aws-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-gcpUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-kvm-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-4.15.0-1199-azureUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1153-oracleUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-5.4Upgrade linux-image-intelUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-4.15.0-1183-gcpUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-4.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1056-nvidia-tegra-rtUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1103-realtimeUpgrade linux-image-5.15.0-1104-gcp-fipsUpgrade linux-image-5.15.0-1087-gkeopUpgrade linux-image-5.15.0-174-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1145-fipsUpgrade linux-image-5.15.0-1056-nvidia-tegraUpgrade linux-image-aws-fips-5.4Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-4.15Upgrade linux-image-gke-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-5.4Upgrade linux-image-gcp-fips-5.4Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-5.15Upgrade linux-image-5.4.0-228-genericUpgrade linux-image-5.15.0-1104-awsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-kvmUpgrade linux-image-oracle-5.4Upgrade linux-image-5.15.0-1045-nvidia-tegra-igxUpgrade linux-image-virtual-5.4Upgrade linux-image-oemUpgrade linux-image-5.4.0-1160-gcpUpgrade linux-image-5.15.0-176-genericUpgrade linux-image-5.15.0-1099-nvidia-lowlatencyUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-4.15.0-1200-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-fips-4.15Upgrade linux-image-4.15.0-1190-awsUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.4.0-1144-kvmUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1104-aws-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1098-ibmUpgrade linux-image-5.15.0-174-fipsUpgrade linux-image-5.15.0-1100-gkeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-174-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.4.0-228-generic-lpaeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-4.15.0-248-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-generic-lpae-5.4Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-4.15.0-1152-oracleUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-5.4Upgrade linux-image-snapdragon-5.4Upgrade linux-image-5.15.0-174-lowlatency-64kUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1101-oracleUpgrade linux-image-raspi2Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1068-xilinx-zynqmpUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1104-aws-64kUpgrade linux-image-xilinxUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-ibm-5.4Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-fips-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-5.15Upgrade linux-image-5.4.0-228-lowlatencyUpgrade linux-image-5.4.0-1160-gcp-fipsUpgrade linux-image-4.15.0-2109-azure-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-lowlatency-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fips-5.4Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.4.0-1157-aws-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-4.15Upgrade linux-image-oracleUpgrade linux-image-lowlatency-5.4Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-1161-azure-fipsUpgrade linux-image-5.4.0-1155-oracleUpgrade linux-image-5.15.0-1099-intel-iotgUpgrade linux-image-4.15.0-2091-gcp-fipsUpgrade linux-image-5.4.0-1131-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1098-raspiUpgrade linux-image-4.15.0-1172-kvmUpgrade linux-image-5.4.0-1140-raspiUpgrade linux-image-5.4.0-1116-bluefieldUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-1157-aws | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub