A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 29, 2021 |
| Amazon Linux Ami 2 | — | Upgrade microvm-kernel-develUpgrade kernelUpgrade microvm-kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade microvm-kernel-debuginfoUpgrade kernel-livepatch-4.14.246-187.474Upgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade microvm-kernel-headersUpgrade kernel-toolsUpgrade microvm-kernelUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.62-55.141Upgrade microvm-kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64 | Sep 16, 2021 | Sep 16, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 16, 2021 | Sep 15, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Sep 29, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-headers | Mar 22, 2022 | Sep 29, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Nov 12, 2021 | Nov 11, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 17, 2021 | Aug 16, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 16, 2021 | Sep 15, 2021 |
| Rocky_linux | — | Upgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernelUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-devel | Mar 12, 2024 | Sep 29, 2021 |
| Suse | — | Upgrade kernel-paeUpgrade kernel-trace-develUpgrade kernel-kvmsmall-baseUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-default-manUpgrade kernel-preempt-livepatch-develUpgrade kernel-pae-develUpgrade kernel-azure-baseUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade dtb-amlogicUpgrade ocfs2-kmp-preemptUpgrade kernel-bigmemUpgrade kernel-64kb-optionalUpgrade kernel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade kernel-debugUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade reiserfs-kmp-64kbUpgrade kernel-bigmem-develUpgrade kernel-bigmem-baseUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade kernel-64kbUpgrade kernel-vanillaUpgrade kernel-default-kgraftUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-lgUpgrade kernel-xenUpgrade kernel-docs-htmlUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdump-manUpgrade dlm-kmp-defaultUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-traceUpgrade reiserfs-kmp-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-preempt-optionalUpgrade kernel-zfcpdumpUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade dtb-alteraUpgrade kernel-ec2Upgrade kernel-vanilla-develUpgrade kernel-source-azureUpgrade kernel-trace-baseUpgrade gfs2-kmp-preemptUpgrade kernel-default-optionalUpgrade kernel-vanilla-livepatch-develUpgrade dtb-zteUpgrade kernel-obs-buildUpgrade dtb-exynosUpgrade kselftests-kmp-preemptUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-xilinxUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default-extraUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-azure-develUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kernel-ec2-develUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade cluster-md-kmp-preemptUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-preemptUpgrade kernel-sourceUpgrade dtb-allwinnerUpgrade dtb-apmUpgrade kernel-ec2-baseUpgrade kernel-ppc64Upgrade gfs2-kmp-defaultUpgrade kernel-xen-develUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade kernel-preempt-develUpgrade kernel-ppc64-baseUpgrade dtb-nvidiaUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-vanilla-baseUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade kernel-pae-baseUpgrade kernel-preempt-extraUpgrade dlm-kmp-azureUpgrade kernel-debug-baseUpgrade dtb-alUpgrade kernel-default-base-rebuildUpgrade kernel-ppc64-develUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade dtb-qcomUpgrade kernel-xen-baseUpgrade dtb-sprdUpgrade dlm-kmp-preempt | Sep 16, 2021 | Aug 16, 2021 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-156-genericUpgrade linux-image-5.4.0-1058-azureUpgrade linux-image-4.4.0-1097-kvmUpgrade linux-image-5.4.0-84-generic-lpaeUpgrade linux-image-4.15.0-1108-gcpUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.8.0-1041-azureUpgrade linux-image-5.4.0-84-lowlatencyUpgrade linux-image-4.15.0-1080-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.10.0-1045-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1123-azureUpgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1054-oracleUpgrade linux-image-4.15.0-1027-dell300xUpgrade linux-image-5.11.0-1017-awsUpgrade linux-image-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1046-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.11.0-34-genericUpgrade linux-image-virtualUpgrade linux-image-4.4.0-214-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-84-genericUpgrade linux-image-4.15.0-1099-kvmUpgrade linux-image-4.15.0-156-generic-lpaeUpgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-azureUpgrade linux-image-4.15.0-156-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-5.11.0-1017-raspi-nolpaeUpgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-5.4.0-1056-awsUpgrade linux-image-5.4.0-1023-gkeopUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-4.15.0-1112-snapdragonUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-5.13.0-1012-oemUpgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1052-gcpUpgrade linux-image-4.4.0-214-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-1111-awsUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-4.4.0-1132-awsUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.11.0-1015-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-dell300xUpgrade linux-image-5.4.0-1052-gkeUpgrade linux-image-generic | Sep 8, 2021 | Aug 16, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 29, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub