A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.209-160.335Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade python-perf | Dec 10, 2020 | Dec 10, 2020 |
| Amazon_linux | — | Upgrade kernel | Dec 19, 2020 | Dec 8, 2020 |
| Centos_linux | — | Upgrade kernel | Sep 1, 2021 | Dec 15, 2020 |
| Debian | — | Upgrade linux | Dec 7, 2020 | Dec 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Feb 22, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Apr 30, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade kernel-tools | Mar 24, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade perfUpgrade python-perfUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade kernel-tools | Dec 15, 2020 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jan 5, 2021 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade kernel | Sep 1, 2021 | Oct 8, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution exists | Sep 1, 2021 | Dec 15, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extra | Dec 11, 2020 | Dec 8, 2020 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-5.4.0-59-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-4.4.0-201-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-5.4.0-1034-oracleUpgrade linux-image-4.15.0-129-generic-lpaeUpgrade linux-image-4.15.0-1091-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-129-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1033-gcpUpgrade linux-image-4.4.0-201-generic-lpaeUpgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1031-kvmUpgrade linux-image-snapdragonUpgrade linux-image-genericUpgrade linux-image-4.4.0-201-powerpc64-embUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1035-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.8.0-1023-azureUpgrade linux-image-5.4.0-59-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-201-powerpc-smpUpgrade linux-image-gke-5.4Upgrade linux-image-oemUpgrade linux-image-4.15.0-129-genericUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1103-azureUpgrade linux-image-5.4.0-1033-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-59-genericUpgrade linux-image-azureUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-4.15.0-1077-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-awsUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-5.4.0-1026-raspiUpgrade linux-image-gke-4.15Upgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-4.4.0-201-genericUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1091-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-raspi2Upgrade linux-image-4.4.0-201-powerpc64-smpUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1062-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-201-powerpc-e500mcUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-1094-snapdragonUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1077-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1034-awsUpgrade linux-image-4.15.0-1082-kvm | Jan 6, 2021 | Dec 8, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub