A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.62-55.141Upgrade microvm-kernel-headersUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade microvm-kernel-debuginfo-common-aarch64Upgrade microvm-kernel-debuginfo-common-x86_64Upgrade microvm-kernelUpgrade microvm-kernel-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.246-187.474Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade microvm-kernel-develUpgrade kernel-tools-debuginfo | Sep 16, 2021 | Sep 16, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Oct 14, 2021 | Oct 12, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Nov 29, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Nov 12, 2021 | Nov 11, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 17, 2021 | Aug 16, 2021 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 29, 2021 | Sep 28, 2021 |
| Rocky_linux | — | Upgrade kernel-develUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfo | May 5, 2022 | Mar 4, 2022 |
| Suse | — | Upgrade cluster-md-kmp-azureUpgrade dtb-socionextUpgrade cluster-md-kmp-preemptUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade kernel-default-livepatch-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-vanillaUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade kernel-64kb-develUpgrade reiserfs-kmp-64kbUpgrade dtb-amdUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-preempt-optionalUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdump-manUpgrade kernel-azure-extraUpgrade dtb-apmUpgrade kernel-preempt-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade kernel-default-extraUpgrade kernel-develUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade kernel-vanilla-develUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-preemptUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-devel-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade dlm-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-preemptUpgrade kernel-preempt-develUpgrade dtb-allwinnerUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade kernel-default-manUpgrade kernel-preempt-extraUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-preemptUpgrade dtb-zteUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade kselftests-kmp-preemptUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade dtb-alUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade dtb-mediatekUpgrade kselftests-kmp-azureUpgrade kernel-debug-baseUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade dtb-caviumUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-rockchip | Sep 16, 2021 | Aug 16, 2021 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1052-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.13.0-1012-oemUpgrade linux-image-4.15.0-156-genericUpgrade linux-image-5.4.0-1058-azureUpgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1056-awsUpgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-5.8.0-1041-azureUpgrade linux-image-oem-20.04Upgrade linux-image-genericUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1111-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1080-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-dell300xUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1052-gkeUpgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1054-oracleUpgrade linux-image-5.4.0-1046-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-156-lowlatencyUpgrade linux-image-5.4.0-84-genericUpgrade linux-image-5.4.0-84-lowlatencyUpgrade linux-image-azureUpgrade linux-image-4.15.0-1027-dell300xUpgrade linux-image-5.4.0-84-generic-lpaeUpgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-gke-5.4Upgrade linux-image-5.10.0-1045-oemUpgrade linux-image-5.11.0-34-genericUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1023-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-156-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1099-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-4.15.0-1108-gcpUpgrade linux-image-4.15.0-1112-snapdragonUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.11.0-1015-azureUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1123-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-snapdragonUpgrade linux-image-5.11.0-1017-awsUpgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-5.11.0-1017-raspi-nolpae | Sep 9, 2021 | Aug 16, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub