In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v3-its: Avoid truncating memory addresses
On 32-bit machines with CONFIG_ARM_LPAE, it is possible for lowmem allocations to be backed by addresses physical memory above the 32-bit address limit, as found while experimenting with larger VMSPLIT configurations.
This caused the qemu virt model to crash in the GICv3 driver, which allocates the 'itt' object using GFP_KERNEL. Since all memory below the 4GB physical address limit is in ZONE_DMA in this configuration, kmalloc() defaults to higher addresses for ZONE_NORMAL, and the ITS driver stores the physical address in a 32-bit 'unsigned long' variable.
Change the itt_addr variable to the correct phys_addr_t type instead, along with all other variables in this driver that hold a physical address.
The gicv5 driver correctly uses u64 variables, while all other irqchip drivers don't call virt_to_phys or similar interfaces. It's expected that other device drivers have similar issues, but fixing this one is sufficient for booting a virtio based guest.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-5.15.201-140.219Upgrade kernel-livepatch-5.10.251-248.983 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel6.12-libbpf-develUpgrade python3-perfUpgrade kernel6.12-libbpf-staticUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.163-186.299Upgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernel-libbpf-develUpgrade perf6.12Upgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-libbpfUpgrade kernel6.12-tools-debuginfoUpgrade kernelUpgrade python3-perf6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-modules-extraUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-headersUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.12.68-92.122Upgrade python3-perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel-debuginfoUpgrade perfUpgrade kernel6.12-develUpgrade kernel-headersUpgrade kernel-develUpgrade bpftool6.12Upgrade perf6.12-debuginfo | Mar 9, 2026 | Feb 4, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 11, 2026 | Feb 11, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 13, 2026 | Feb 4, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 4, 2026 |
| Ubuntu | — | Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1088-gkeopUpgrade linux-image-5.15.0-1105-gcp-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-5.15.0-175-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1100-nvidia-lowlatencyUpgrade linux-image-5.15.0-1102-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-24.04cUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-5.15.0-1106-gcpUpgrade linux-image-5.15.0-1097-kvmUpgrade linux-image-ibmUpgrade linux-image-5.15.0-176-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1057-nvidia-tegra-rtUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-176-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-6.17Upgrade linux-image-oracle-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-6.8.0-117-genericUpgrade linux-image-azure-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-azure-fde-6.17Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-oem-6.17Upgrade linux-image-gke-5.15Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1110-azure-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-6.17Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-6.17Upgrade linux-image-azure-fdeUpgrade linux-image-fips-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracleUpgrade linux-image-6.17.0-1021-azureUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1100-intel-iotgUpgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-awsUpgrade linux-image-raspi-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1057-nvidia-tegraUpgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-175-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-5.15.0-176-generic-lpaeUpgrade linux-image-5.15.0-1105-awsUpgrade linux-image-5.15.0-1101-gkeUpgrade linux-image-genericUpgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1070-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-realtimeUpgrade linux-image-realtime-6.17Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.17.0-1030-oemUpgrade linux-image-5.15.0-176-genericUpgrade linux-image-5.15.0-1097-intel-iot-realtimeUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-5.15.0-1104-realtimeUpgrade linux-image-5.15.0-1046-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-5.15.0-1099-ibmUpgrade linux-image-5.15.0-1099-raspiUpgrade linux-image-5.15.0-1046-nvidia-tegra-igxUpgrade linux-image-oracle-64kUpgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-oem-24.04dUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-fips-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gkeopUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-6.8.0-1056-azureUpgrade linux-image-5.15.0-1105-gcpUpgrade linux-image-5.15.0-1105-aws-64kUpgrade linux-image-5.15.0-1100-nvidiaUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-nvidia-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-intelUpgrade linux-image-azure-6.17Upgrade linux-image-6.8.0-1055-awsUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-6.8.0-116-fipsUpgrade linux-image-xilinxUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-azure-fips-6.8 | Apr 10, 2026 | Feb 4, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 4, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub