A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jun 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-devel | Jul 4, 2022 | Jun 1, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 2, 2021 | Jun 1, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 1, 2021 |
| Oracle_linux | — | Upgrade kernel | Jun 3, 2021 | Apr 29, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 2, 2021 | Jun 1, 2021 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernelUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade perfUpgrade kernel-debug-devel | May 5, 2022 | Jun 1, 2021 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-5.11.0-22-genericUpgrade linux-image-virtualUpgrade linux-image-5.11.0-1011-gcpUpgrade linux-image-gcpUpgrade linux-image-5.11.0-22-generic-lpaeUpgrade linux-image-5.11.0-1009-azureUpgrade linux-image-5.11.0-1009-kvmUpgrade linux-image-genericUpgrade linux-image-5.11.0-1010-oracleUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-5.11.0-22-generic-64kUpgrade linux-image-5.10.0-1033-oemUpgrade linux-image-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.11.0-22-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-5.11.0-1011-awsUpgrade linux-image-5.11.0-1012-raspiUpgrade linux-image-raspiUpgrade linux-image-5.11.0-1012-raspi-nolpaeUpgrade linux-image-oem-20.04b | Jun 23, 2021 | Jun 1, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 1, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub