In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Reset IRTE to host control if *new* route isn't postable
Restore an IRTE back to host control (remapped or posted MSI mode) if the *new* GSI route prevents posting the IRQ directly to a vCPU, regardless of the GSI routing type. Updating the IRTE if and only if the new GSI is an MSI results in KVM leaving an IRTE posting to a vCPU.
The dangling IRTE can result in interrupts being incorrectly delivered to the guest, and in the worst case scenario can result in use-after-free, e.g. if the VM is torn down, but the underlying host IRQ isn't freed.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.237-230.949Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.184-125.190Upgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade python3-perf6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade python3-perf6.12Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64 | Aug 5, 2025 | May 9, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | May 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftool | Feb 3, 2026 | Jan 13, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-develUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade dtb-renesasUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade dtb-amdUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-rtUpgrade dtb-marvellUpgrade dtb-xilinxUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade kernel-default-manUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-source-rtUpgrade kernel-rtUpgrade kernel-source-vanilla | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-intelUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-ibmUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-azure-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-genericUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-5.15Upgrade linux-image-xilinxUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-6.8Upgrade linux-image-gkeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracleUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-awsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-kvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-5.15 | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub