In the Linux kernel, the following vulnerability has been resolved:
KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls
kvm_xen_schedop_poll does a kmalloc_array() when a VM polls the host for more than one event channel potr (nr_ports > 1).
After the kmalloc_array(), the error paths need to go through the "out" label, but the call to kvm_read_guest_virt() does not.
[Adjusted commit message. - Paolo]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-gcpUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oracleUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-virtualUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-realtimeUpgrade linux-image-oem-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-6.8Upgrade linux-image-kvmUpgrade linux-image-realtime-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-azureUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-aws-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-6.14Upgrade linux-image-ibm-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-gcp-fipsUpgrade linux-image-raspi | Jul 31, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub