A vulnerability in the Linux kernel KVM component could allow a local attacker with high privileges to compromise system integrity or cause a denial of service.

This flaw exists in the KVM (Kernel-based Virtual Machine) SVM (Secure Virtual Machine) implementation. It involves incorrect management of x2APIC MSR intercepts when the AVIC (AMD Virtual Interrupt Controller) is inhibited while L2 guest mode is active, requiring high privileges to exploit.

Successful exploitation of this vulnerability could result in a complete compromise of the affected virtualized environment. Because this vulnerability allows for scope escalation, an attacker might gain unauthorized control over host resources, leading to data breaches or significant service disruption. The CVSS score of 8.2 reflects the high risk associated with potential impacts on confidentiality, integrity, and availability.

Immediate Action: Update your Linux kernel to version 6.6.151, 6.12.103, 6.18.44, 7.1.8, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor KVM-related kernel logs and audit system calls for unusual activity originating from virtualization management processes.

Compensating Controls: Restrict access to virtualization management interfaces and ensure that only trusted, highly privileged accounts can interact with KVM configurations.

Public Exploit Available: Unknown

Given the high severity of this kernel-level vulnerability, administrators should prioritize patching their virtualization hosts. Applying the available kernel updates is essential to prevent potential privilege escalation within virtualized environments.