An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.
CVSS Details
- CVSS 4.0 Base Score: 9.3 (Critical)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L)
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 26, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.243-185.433Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perfUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernelUpgrade python-perf-debuginfo | Aug 25, 2021 | May 26, 2021 |
| Amazon_linux | — | Upgrade kernel | Oct 5, 2021 | May 26, 2021 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_36_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_41_1-debuginfoUpgrade kpatch-patch-4_18_0-305_3_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_6_1Upgrade kpatch-patch-3_10_0-1160_2_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_41_1Upgrade kpatch-patch-3_10_0-1160_11_1-debuginfoUpgrade kpatch-patch-4_18_0-305_7_1Upgrade kpatch-patch-4_18_0-305_10_2Upgrade kpatch-patch-4_18_0-305-debuginfoUpgrade kpatch-patch-4_18_0-305_3_1Upgrade kpatch-patch-3_10_0-1160_15_2Upgrade kpatch-patch-4_18_0-305_3_1-debuginfoUpgrade kpatch-patch-4_18_0-305Upgrade kpatch-patch-3_10_0-1160_21_1Upgrade kernel-rtUpgrade kpatch-patch-3_10_0-1160_2_2Upgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-4_18_0-305_10_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_15_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_2_1Upgrade kpatch-patch-3_10_0-1160_36_2Upgrade kpatch-patch-3_10_0-1160_25_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_31_1Upgrade kpatch-patch-4_18_0-305-debugsourceUpgrade kpatch-patch-3_10_0-1160_6_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_2_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_21_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_24_1Upgrade kpatch-patch-3_10_0-1160_24_1-debuginfoUpgrade kernelUpgrade kpatch-patch-4_18_0-305_7_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_25_1Upgrade kpatch-patch-4_18_0-305_7_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_11_1Upgrade kpatch-patch-4_18_0-305_10_2-debugsourceUpgrade kpatch-patch-3_10_0-1160_42_2Upgrade kpatch-patch-3_10_0-1160_31_1-debuginfo | Aug 12, 2021 | May 26, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | May 26, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Apr 19, 2022 | May 26, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 12, 2021 | May 18, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Aug 12, 2021 | May 26, 2021 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-rt-develUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-debuginfo | May 5, 2022 | May 26, 2021 |
| Suse | — | Upgrade kernel-debug-baseUpgrade kernel-livepatch-5_3_18-24_43-defaultUpgrade kernel-livepatch-5_3_18-24_70-defaultUpgrade kernel-livepatch-5_3_18-24_29-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-livepatch-4_12_14-197_75-defaultUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-preemptUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-livepatch-5_3_18-24_61-defaultUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-preemptUpgrade dtb-exynosUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kgraft-patch-4_12_14-95_83-defaultUpgrade kernel-livepatch-4_12_14-150_72-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-livepatch-5_3_18-59_13-defaultUpgrade kernel-livepatch-5_3_18-24_75-defaultUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kgraft-patch-4_12_14-95_74-defaultUpgrade kernel-livepatch-4_12_14-150_58-defaultUpgrade dtb-alteraUpgrade cluster-md-kmp-preemptUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade kernel-livepatch-5_3_18-24_78-defaultUpgrade dtb-broadcomUpgrade kernel-64kb-livepatch-develUpgrade kernel-livepatch-4_12_14-197_89-defaultUpgrade kernel-vanilla-baseUpgrade kernel-default-extraUpgrade kernel-livepatch-4_12_14-150_63-defaultUpgrade kernel-zfcpdumpUpgrade kernel-livepatch-5_3_18-24_53_4-defaultUpgrade dtb-marvellUpgrade ocfs2-kmp-preemptUpgrade kernel-vanilla-develUpgrade kernel-64kbUpgrade kgraft-patch-4_12_14-122_46-defaultUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-default-kgraftUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade kernel-macrosUpgrade kernel-livepatch-4_12_14-197_51-defaultUpgrade kernel-kvmsmallUpgrade kernel-livepatch-5_3_18-59_10-defaultUpgrade kgraft-patch-4_12_14-122_74-defaultUpgrade kernel-livepatch-5_3_18-59_5-defaultUpgrade kernel-kvmsmall-baseUpgrade kernel-livepatch-4_12_14-197_67-defaultUpgrade kernel-livepatch-5_3_18-24_12-defaultUpgrade gfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-vanillaUpgrade kernel-default-livepatchUpgrade kgraft-patch-4_12_14-122_66-defaultUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade kgraft-patch-4_12_14-122_77-defaultUpgrade kernel-docs-htmlUpgrade kernel-livepatch-4_12_14-197_99-defaultUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade kernel-livepatch-5_3_18-24_34-defaultUpgrade kernel-livepatch-4_12_14-197_64-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade kernel-livepatch-5_3_18-24_64-defaultUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade kgraft-patch-4_12_14-95_65-defaultUpgrade kgraft-patch-4_12_14-122_60-defaultUpgrade kernel-default-livepatch-develUpgrade kgraft-patch-4_12_14-95_77-defaultUpgrade kgraft-patch-4_12_14-122_71-defaultUpgrade kernel-livepatch-5_3_18-57-defaultUpgrade kgraft-patch-4_12_14-122_57-defaultUpgrade kernel-livepatch-5_3_18-24_37-defaultUpgrade kernel-default-optionalUpgrade kselftests-kmp-preemptUpgrade kernel-source-vanillaUpgrade kernel-livepatch-4_12_14-197_56-defaultUpgrade dtb-alUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade dlm-kmp-preemptUpgrade kernel-livepatch-5_3_18-24_15-defaultUpgrade kernel-livepatch-5_3_18-24_67-defaultUpgrade kernel-vanilla-livepatch-develUpgrade dtb-renesasUpgrade kgraft-patch-4_12_14-122_83-defaultUpgrade kernel-livepatch-4_12_14-197_72-defaultUpgrade kernel-defaultUpgrade dtb-zteUpgrade kgraft-patch-4_12_14-122_80-defaultUpgrade kernel-livepatch-5_3_18-24_52-defaultUpgrade kernel-preempt-optionalUpgrade kernel-livepatch-4_12_14-150_69-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-livepatch-4_12_14-197_92-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-livepatch-5_3_18-59_16-defaultUpgrade kernel-default-baseUpgrade kernel-livepatch-5_3_18-59_19-defaultUpgrade kgraft-patch-4_12_14-122_51-defaultUpgrade dtb-armUpgrade kernel-livepatch-5_3_18-24_24-defaultUpgrade kgraft-patch-4_12_14-122_37-defaultUpgrade kernel-livepatch-4_12_14-150_78-defaultUpgrade kgraft-patch-4_12_14-95_68-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-default-manUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade kernel-livepatch-4_12_14-197_61-defaultUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade kgraft-patch-4_12_14-122_63-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-livepatch-4_12_14-197_102-defaultUpgrade kgraft-patch-4_12_14-122_32-defaultUpgrade kgraft-patch-4_12_14-95_71-defaultUpgrade kernel-preempt-develUpgrade kernel-livepatch-4_12_14-150_75-defaultUpgrade dtb-sprdUpgrade kgraft-patch-4_12_14-95_60-defaultUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade kernel-default-kgraft-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-preemptUpgrade kernel-develUpgrade dtb-mediatekUpgrade kernel-azureUpgrade dlm-kmp-azureUpgrade kernel-preempt-extraUpgrade kgraft-patch-4_12_14-122_54-defaultUpgrade kgraft-patch-4_12_14-95_80-defaultUpgrade kernel-livepatch-4_12_14-197_86-defaultUpgrade kgraft-patch-4_12_14-122_41-defaultUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-64kb-extra | Aug 11, 2021 | May 26, 2021 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-5.4.0-1054-oracleUpgrade linux-image-4.15.0-1124-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1052-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1112-awsUpgrade linux-image-4.15.0-159-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1081-oracleUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1058-azureUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1043-raspiUpgrade linux-image-5.11.0-1017-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-5.10.0-1049-oemUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-159-genericUpgrade linux-image-5.4.0-1056-awsUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-84-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1028-dell300xUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1023-gkeopUpgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-5.4.0-84-generic-lpaeUpgrade linux-image-4.15.0-1109-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-159-lowlatencyUpgrade linux-image-5.4.0-1052-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1046-kvmUpgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-5.11.0-1015-azureUpgrade linux-image-awsUpgrade linux-image-oemUpgrade linux-image-dell300xUpgrade linux-image-5.8.0-1043-azureUpgrade linux-image-gke-5.4Upgrade linux-image-raspiUpgrade linux-image-5.4.0-84-lowlatencyUpgrade linux-image-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.11.0-34-genericUpgrade linux-image-5.11.0-1017-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1100-kvmUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1096-raspi2Upgrade linux-image-4.15.0-1113-snapdragon | Sep 9, 2021 | May 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub