In the Linux kernel, the following vulnerability has been resolved:
KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN
For guests with NRIPS disabled, L1 does not provide NextRIP when running an L2 with an injected soft interrupt, instead it advances the current RIP before running it. KVM uses the current RIP as the NextRIP in vmcb02 to emulate a CPU without NRIPS.
However, after L2 runs the first time, NextRIP will be updated by the CPU and/or KVM, and the current RIP is no longer the correct value to use in vmcb02. Hence, after save/restore, use the current RIP if and only if a nested run is pending, otherwise use NextRIP. Give soft_int_next_rip the same treatment, as it's the same logic, just for a narrower use case.
[sean: give soft_int_next_rip the same treatment]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.18-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-toolsUpgrade kernel6.18-debuginfoUpgrade kernel6.18-headersUpgrade python3-perf6.18Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18Upgrade kernel6.18-tools-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-modules-extra-commonUpgrade bpftool6.18Upgrade python3-perf6.18-debuginfoUpgrade perf6.18Upgrade kernel6.18-develUpgrade kernel-livepatch-6.18.30-61.116Upgrade kernel6.18-modules-extra | Jun 23, 2026 | May 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 27, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1008-oemUpgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-26.04aUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-nvidia-7.0Upgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-generic-64kUpgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-raspiUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-oem-7.0Upgrade linux-image-ibmUpgrade linux-image-ibm-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-genericUpgrade linux-image-oem-26.04Upgrade linux-image-oracle-7.0Upgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oem-24.04cUpgrade linux-image-oracleUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-virtual-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-awsUpgrade linux-image-realtime-64kUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-oem-24.04dUpgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-27-genericUpgrade linux-image-gcpUpgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1008-awsUpgrade linux-image-7.0.0-1007-oracle | Jul 1, 2026 | May 27, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub