In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Reset IRTE to host control if *new* route isn't postable
Restore an IRTE back to host control (remapped or posted MSI mode) if the *new* GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing type. Updating the IRTE if and only if the new GSI is an MSI results in KVM leaving an IRTE posting to a vCPU.
The dangling IRTE can result in interrupts being incorrectly delivered to the guest, and in the worst case scenario can result in use-after-free, e.g. if the VM is torn down, but the underlying host IRQ isn't freed.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.237-230.949Upgrade kernel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-toolsUpgrade perf6.12-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel6.12Upgrade kernel-livepatch-6.1.140-154.222Upgrade perf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-develUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel-modules-extraUpgrade kernel-headersUpgrade perfUpgrade python3-perf6.12Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo | Aug 5, 2025 | May 9, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | May 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Feb 3, 2026 | Jan 13, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-rtUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-debugUpgrade dtb-socionextUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade dtb-amdUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kernel-develUpgrade kernel-rt-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-syms | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-aws-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-xilinx-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-gke-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-azure-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-gke-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-intelUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azureUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeopUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-gcp-64kUpgrade linux-image-aws-fips-5.15 | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub