In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Reset IRTE to host control if *new* route isn't postable
Restore an IRTE back to host control (remapped or posted MSI mode) if the *new* GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing type. Updating the IRTE if and only if the new GSI is an MSI results in KVM leaving an IRTE posting to a vCPU.
The dangling IRTE can result in interrupts being incorrectly delivered to the guest, and in the worst case scenario can result in use-after-free, e.g. if the VM is torn down, but the underlying host IRQ isn't freed.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.237-230.949Upgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade perf6.12-debuginfoUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade kernelUpgrade python3-perfUpgrade python3-perf6.12-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-modules-extraUpgrade perf6.12Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel6.12Upgrade python3-perf6.12Upgrade kernel-headersUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-libbpf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64 | Aug 5, 2025 | May 9, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | May 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Feb 3, 2026 | Jan 13, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade dtb-exynosUpgrade dtb-marvellUpgrade dtb-xilinxUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade kernel-debugUpgrade kernel-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade dtb-amazonUpgrade dtb-amdUpgrade dtb-apmUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-default-manUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade dtb-sprdUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-devel | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-fips-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-gcp-6.8Upgrade linux-image-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-aws-5.15Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-gke-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcpUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-5.15Upgrade linux-image-intelUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-gke-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-xilinxUpgrade linux-image-realtime-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-22.04c | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub