A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.209-160.335Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-devel | Dec 10, 2020 | Dec 10, 2020 |
| Amazon_linux | — | Upgrade kernel | Dec 19, 2020 | Dec 8, 2020 |
| Centos_linux | — | Upgrade kernel | Sep 1, 2021 | Dec 15, 2020 |
| Debian | — | Upgrade linux | Dec 7, 2020 | Dec 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debugUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64 | Feb 22, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-devel | Apr 30, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-tools | Mar 24, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade python3-perfUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade bpftool | Dec 15, 2020 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jan 5, 2021 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade kernel | Sep 1, 2021 | Oct 8, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernel | Sep 1, 2021 | Dec 15, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default | Dec 11, 2020 | Dec 8, 2020 |
| Ubuntu | — | Upgrade linux-image-4.15.0-129-lowlatencyUpgrade linux-image-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-129-generic-lpaeUpgrade linux-image-5.4.0-1033-gkeUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-59-generic-lpaeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1034-oracleUpgrade linux-image-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1103-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-oracleUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-201-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-5.4.0-1031-kvmUpgrade linux-image-5.4.0-1035-azureUpgrade linux-image-4.4.0-201-powerpc64-embUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-4.4.0-201-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-59-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1091-awsUpgrade linux-image-5.4.0-1033-gcpUpgrade linux-image-powerpc-smpUpgrade linux-image-5.8.0-1023-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-129-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-201-powerpc-smpUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-201-powerpc-e500mcUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1062-oracleUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-gke-4.15Upgrade linux-image-kvmUpgrade linux-image-4.4.0-201-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-gcpUpgrade linux-image-4.4.0-201-genericUpgrade linux-image-5.4.0-59-genericUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1094-snapdragonUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1077-gkeUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1082-kvmUpgrade linux-image-5.4.0-1026-raspiUpgrade linux-image-4.15.0-1077-raspi2Upgrade linux-image-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-5.4.0-1034-awsUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1091-gcpUpgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenial | Jan 6, 2021 | Dec 8, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub