A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Dec 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.209-160.335Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-tools-devel | Dec 10, 2020 | Dec 10, 2020 |
| Amazon_linux | — | Upgrade kernel | Dec 19, 2020 | Dec 8, 2020 |
| Centos_linux | — | Upgrade kernel | Sep 1, 2021 | Dec 15, 2020 |
| Debian | — | Upgrade linux | Dec 7, 2020 | Dec 7, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 22, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Apr 30, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-devel | Mar 24, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-sourceUpgrade python3-perfUpgrade perfUpgrade python-perfUpgrade kernel-headers | Dec 15, 2020 | Dec 14, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jan 5, 2021 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade kernel | Sep 1, 2021 | Oct 8, 2020 |
| Redhat_linux | — | No solution existsUpgrade kernel | Sep 1, 2021 | Dec 15, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-extra | Dec 11, 2020 | Dec 8, 2020 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-201-powerpc64-embUpgrade linux-image-5.8.0-1023-azureUpgrade linux-image-5.4.0-1034-oracleUpgrade linux-image-4.15.0-1091-awsUpgrade linux-image-4.4.0-201-powerpc-smpUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1031-kvmUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1035-azureUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-129-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-59-lowlatencyUpgrade linux-image-4.15.0-1103-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-5.4.0-1033-gkeUpgrade linux-image-generic-64kUpgrade linux-image-powerpc-smpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-201-generic-lpaeUpgrade linux-image-4.4.0-201-lowlatencyUpgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-5.4.0-59-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1033-gcpUpgrade linux-image-gkeUpgrade linux-image-4.15.0-129-generic-lpaeUpgrade linux-image-4.15.0-129-genericUpgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-201-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1091-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-5.8.0-1024-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1062-oracleUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-5.4.0-1034-awsUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1077-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-4.4.0-201-powerpc64-smpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.4.0-1026-raspiUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1077-raspi2Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-201-powerpc-e500mcUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1082-kvmUpgrade linux-image-5.4.0-59-genericUpgrade linux-image-4.15.0-1094-snapdragonUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure | Jan 6, 2021 | Dec 8, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub