A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.209-160.335Upgrade kernel-devel | Dec 10, 2020 | Dec 10, 2020 |
| Amazon_linux | — | Upgrade kernel | Dec 19, 2020 | Dec 8, 2020 |
| Centos_linux | — | Upgrade kernel | Sep 1, 2021 | Dec 15, 2020 |
| Debian | — | Upgrade linux | Dec 7, 2020 | Dec 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade perfUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-libs | Feb 22, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-devel | Apr 30, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade python-perf | Mar 24, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade python-perfUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Dec 15, 2020 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jan 5, 2021 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade kernel | Sep 1, 2021 | Oct 8, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernel | Sep 1, 2021 | Dec 15, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | Dec 11, 2020 | Dec 8, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-201-powerpc64-embUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1033-gcpUpgrade linux-image-4.15.0-1091-awsUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-5.4.0-59-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1033-gkeUpgrade linux-image-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-129-genericUpgrade linux-image-oemUpgrade linux-image-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.8.0-1023-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-129-generic-lpaeUpgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-4.4.0-201-powerpc-smpUpgrade linux-image-oem-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-201-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-201-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-59-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-129-lowlatencyUpgrade linux-image-5.4.0-1031-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-powerpc-smpUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-4.15.0-1103-azureUpgrade linux-image-5.4.0-1034-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1035-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-1034-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-4.15.0-1091-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-4.15Upgrade linux-image-kvmUpgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-4.4.0-201-powerpc64-smpUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1062-oracleUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1026-raspiUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-4.15.0-1077-gkeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1077-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-4.4.0-201-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1082-kvmUpgrade linux-image-gcpUpgrade linux-image-5.4.0-59-genericUpgrade linux-image-4.4.0-201-genericUpgrade linux-image-virtualUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1094-snapdragon | Jan 6, 2021 | Dec 8, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub