In the Linux kernel, the following vulnerability has been resolved:
x86/sev: Evict cache lines during SNP memory validation
An SNP cache coherency vulnerability requires a cache line eviction mitigation when validating memory after a page state change to private. The specific mitigation is to touch the first and last byte of each 4K page that is being validated. There is no need to perform the mitigation when performing a page state change to shared and rescinding validation.
CPUID bit Fn8000001F_EBX[31] defines the COHERENCY_SFW_NO CPUID bit that, when set, indicates that the software mitigation for this vulnerability is not needed.
Implement the mitigation and invoke it when validating memory (making it private) and the COHERENCY_SFW_NO bit is not set, indicating the SNP guest is vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.148-173.267Upgrade perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-headersUpgrade kernel-tools-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade perfUpgrade kernel-modules-extraUpgrade python3-perfUpgrade python3-perf6.12Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-develUpgrade kernel6.12-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel6.12-toolsUpgrade kernel-livepatch-6.12.40-64.114Upgrade perf-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.12Upgrade kernel-headersUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade bpftool6.12Upgrade perf6.12Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel6.12-libbpf-develUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo | Sep 16, 2025 | Aug 19, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 8, 2025 | Sep 8, 2025 |
| Dell Powerstore Dsa2026115 | — | Upgrade Dell PowerStoreOS to the latest version | Feb 25, 2026 | Feb 24, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 24, 2025 | Aug 19, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 19, 2025 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-rockchipUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade dtb-amlogicUpgrade kernel-kvmsmall-vdsoUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-rt_debug-develUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade dtb-armUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade dtb-altera | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-kvmUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-gke-64k-6.8Upgrade linux-image-awsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-virtual-6.14Upgrade linux-image-azure-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gkeUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspiUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-gcp-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-realtime-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-6.14Upgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-azure-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-nvidiaUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-64k-6.14 | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 3, 2025 | Aug 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub