Kernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 8 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 6 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 7 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 7 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected | — |
Configuration 1 [-]
|
Configuration 2 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 8 | |||
| kernel-rt-0:4.18.0-553.8.1.rt7.349.el8_10 | cpe:/a:redhat:enterprise_linux:8::nfv | RHSA-2024:4352 | 2024-07-08T00:00:00Z |
| kernel-0:4.18.0-553.8.1.el8_10 | cpe:/o:redhat:enterprise_linux:8 | RHSA-2024:4211 | 2024-07-02T00:00:00Z |
| Red Hat Enterprise Linux 9 | |||
| kernel-0:5.14.0-427.16.1.el9_4 | cpe:/a:redhat:enterprise_linux:9 | RHSA-2024:2758 | 2024-05-08T00:00:00Z |
| kernel-0:5.14.0-427.16.1.el9_4 | cpe:/o:redhat:enterprise_linux:9 | RHSA-2024:2758 | 2024-05-08T00:00:00Z |
| Red Hat Enterprise Linux 9.2 Extended Update Support | |||
| kernel-0:5.14.0-284.69.1.el9_2 | cpe:/a:redhat:rhel_eus:9.2 | RHSA-2024:3855 | 2024-06-12T00:00:00Z |
| kernel-rt-0:5.14.0-284.69.1.rt14.354.el9_2 | cpe:/a:redhat:rhel_eus:9.2::nfv | RHSA-2024:3854 | 2024-06-12T00:00:00Z |
No data available yet.
Vendor Workaround
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2023-57430 | A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic msrs when the guest resets its apic, potentially leading to a denial of service condition. |
Ubuntu USN |
USN-6497-1 | Linux kernel (OEM) vulnerabilities |
Ubuntu USN |
USN-6502-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-6502-2 | Linux kernel (Oracle) vulnerabilities |
Ubuntu USN |
USN-6502-3 | Linux kernel (NVIDIA) vulnerabilities |
Ubuntu USN |
USN-6502-4 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-6503-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-6520-1 | Linux kernel (StarFive) vulnerabilities |
Ubuntu USN |
USN-6537-1 | Linux kernel (GCP) vulnerabilities |
Ubuntu USN |
USN-6572-1 | Linux kernel (Azure) vulnerabilities |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.246% probability within 30 days)
Key SSVC decision points have not yet been added.
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhel Els
|
|
| CPEs | cpe:/o:redhat:enterprise_linux:7 |
cpe:/o:redhat:rhel_els:6 cpe:/o:redhat:rhel_els:7 |
| Vendors & Products |
Redhat rhel Els
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:enterprise_linux:9 |
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::nfv cpe:/a:redhat:enterprise_linux:9::realtime cpe:/o:redhat:enterprise_linux:9::baseos |
|
| References |
|