A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 29, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade microvm-kernel-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade microvm-kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.246-187.474Upgrade microvm-kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-toolsUpgrade microvm-kernel-headersUpgrade kernel-livepatch-5.10.62-55.141Upgrade microvm-kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade microvm-kernelUpgrade bpftool-debuginfo | Sep 16, 2021 | Sep 16, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 16, 2021 | Sep 15, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Sep 29, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libs | Mar 22, 2022 | Sep 29, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Nov 12, 2021 | Nov 11, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 17, 2021 | Aug 16, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 16, 2021 | Sep 15, 2021 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernelUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-modules-extra | Mar 12, 2024 | Sep 29, 2021 |
| Suse | — | Upgrade kgraft-patch-4_4_180-94_135-defaultUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-caviumUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade dtb-zteUpgrade kernel-ppc64Upgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kselftests-kmp-preemptUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-preempt-extraUpgrade kernel-ec2-baseUpgrade kernel-obs-buildUpgrade kernel-ppc64-baseUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-vanilla-baseUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade kernel-devel-azureUpgrade kernel-preemptUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-ec2-develUpgrade kernel-pae-baseUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade cluster-md-kmp-preemptUpgrade kernel-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-xen-develUpgrade dtb-rockchipUpgrade dtb-apmUpgrade dtb-xilinxUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade dlm-kmp-preemptUpgrade kernel-ppc64-develUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-debug-baseUpgrade kernel-default-base-rebuildUpgrade kernel-xen-baseUpgrade dlm-kmp-azureUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-alUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade kernel-bigmem-develUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-symsUpgrade kernel-xenUpgrade dtb-amlogicUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-traceUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade reiserfs-kmp-preemptUpgrade dtb-socionextUpgrade kernel-trace-baseUpgrade kernel-debugUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-paeUpgrade kernel-vanillaUpgrade kernel-pae-develUpgrade kernel-ec2Upgrade kernel-default-kgraftUpgrade kernel-default-manUpgrade kernel-bigmem-baseUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-vanilla-develUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-trace-develUpgrade kernel-preempt-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-preempt-optionalUpgrade kernel-azure-baseUpgrade dtb-amdUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-bigmemUpgrade ocfs2-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade dtb-renesas | Sep 16, 2021 | Aug 16, 2021 |
| Ubuntu | — | Upgrade linux-image-4.4.0-214-genericUpgrade linux-image-4.15.0-1108-gcpUpgrade linux-image-5.4.0-84-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oemUpgrade linux-image-4.15.0-1123-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1046-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-kvmUpgrade linux-image-5.11.0-1017-awsUpgrade linux-image-4.15.0-1080-oracleUpgrade linux-image-4.4.0-1097-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.10.0-1045-oemUpgrade linux-image-5.4.0-84-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.8.0-1041-azureUpgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-84-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1058-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1027-dell300xUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-156-genericUpgrade linux-image-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1054-oracleUpgrade linux-image-5.11.0-34-genericUpgrade linux-image-5.4.0-1052-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-raspiUpgrade linux-image-4.15.0-1112-snapdragonUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-5.13.0-1012-oemUpgrade linux-image-4.4.0-214-lowlatencyUpgrade linux-image-4.15.0-1111-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.11.0-1015-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-5.4.0-1023-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-5.4.0-1052-gkeUpgrade linux-image-5.11.0-1017-raspi-nolpaeUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-5.4.0-1056-awsUpgrade linux-image-azureUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-4.4.0-1132-awsUpgrade linux-image-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1099-kvmUpgrade linux-image-4.15.0-156-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-156-generic-lpaeUpgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-genericUpgrade linux-image-dell300xUpgrade linux-image-oem-20.04b | Sep 8, 2021 | Aug 16, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub