An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.
CVSS Details
- CVSS 4.0 Base Score: 9.3 (Critical)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L)
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-kernel-tools-libs-devel | May 4, 2022 | May 26, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-bpftoolamazon-linux-ami-2-upgrade-bpftool-debuginfoamazon-linux-ami-2-upgrade-kernelamazon-linux-ami-2-upgrade-kernel-debuginfoamazon-linux-ami-2-upgrade-kernel-debuginfo-common-aarch64amazon-linux-ami-2-upgrade-kernel-debuginfo-common-x86_64amazon-linux-ami-2-upgrade-kernel-develamazon-linux-ami-2-upgrade-kernel-headersamazon-linux-ami-2-upgrade-kernel-livepatch-4-14-243-185-433amazon-linux-ami-2-upgrade-kernel-toolsamazon-linux-ami-2-upgrade-kernel-tools-debuginfoamazon-linux-ami-2-upgrade-kernel-tools-develamazon-linux-ami-2-upgrade-perfamazon-linux-ami-2-upgrade-perf-debuginfoamazon-linux-ami-2-upgrade-python-perfamazon-linux-ami-2-upgrade-python-perf-debuginfo | Aug 25, 2021 | May 26, 2021 | |
| Amazon_linux | — | amazon-linux-upgrade-kernel | Oct 5, 2021 | May 26, 2021 |
| Centos_linux | — | centos-upgrade-kernelcentos-upgrade-kernel-rtcentos-upgrade-kpatch-patch-3_10_0-1160_11_1centos-upgrade-kpatch-patch-3_10_0-1160_11_1-debuginfocentos-upgrade-kpatch-patch-3_10_0-1160_15_2centos-upgrade-kpatch-patch-3_10_0-1160_15_2-debuginfocentos-upgrade-kpatch-patch-3_10_0-1160_21_1centos-upgrade-kpatch-patch-3_10_0-1160_21_1-debuginfocentos-upgrade-kpatch-patch-3_10_0-1160_24_1centos-upgrade-kpatch-patch-3_10_0-1160_24_1-debuginfocentos-upgrade-kpatch-patch-3_10_0-1160_25_1centos-upgrade-kpatch-patch-3_10_0-1160_25_1-debuginfocentos-upgrade-kpatch-patch-3_10_0-1160_2_1centos-upgrade-kpatch-patch-3_10_0-1160_2_1-debuginfocentos-upgrade-kpatch-patch-3_10_0-1160_2_2centos-upgrade-kpatch-patch-3_10_0-1160_2_2-debuginfocentos-upgrade-kpatch-patch-3_10_0-1160_31_1centos-upgrade-kpatch-patch-3_10_0-1160_31_1-debuginfocentos-upgrade-kpatch-patch-3_10_0-1160_36_2centos-upgrade-kpatch-patch-3_10_0-1160_36_2-debuginfocentos-upgrade-kpatch-patch-3_10_0-1160_41_1centos-upgrade-kpatch-patch-3_10_0-1160_41_1-debuginfocentos-upgrade-kpatch-patch-3_10_0-1160_42_2centos-upgrade-kpatch-patch-3_10_0-1160_42_2-debuginfocentos-upgrade-kpatch-patch-3_10_0-1160_6_1centos-upgrade-kpatch-patch-3_10_0-1160_6_1-debuginfocentos-upgrade-kpatch-patch-4_18_0-305centos-upgrade-kpatch-patch-4_18_0-305-debuginfocentos-upgrade-kpatch-patch-4_18_0-305-debugsourcecentos-upgrade-kpatch-patch-4_18_0-305_10_2centos-upgrade-kpatch-patch-4_18_0-305_10_2-debuginfocentos-upgrade-kpatch-patch-4_18_0-305_10_2-debugsourcecentos-upgrade-kpatch-patch-4_18_0-305_3_1centos-upgrade-kpatch-patch-4_18_0-305_3_1-debuginfocentos-upgrade-kpatch-patch-4_18_0-305_3_1-debugsourcecentos-upgrade-kpatch-patch-4_18_0-305_7_1centos-upgrade-kpatch-patch-4_18_0-305_7_1-debuginfocentos-upgrade-kpatch-patch-4_18_0-305_7_1-debugsource | Aug 12, 2021 | May 26, 2021 |
| Debian | debian-upgrade-linux | Nov 29, 2021 | May 26, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-kernelhuawei-euleros-2_0_sp9-upgrade-kernel-toolshuawei-euleros-2_0_sp9-upgrade-kernel-tools-libshuawei-euleros-2_0_sp9-upgrade-python3-perf | Apr 19, 2022 | May 26, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-kerneloracle-linux-upgrade-kernel-uek | Aug 12, 2021 | May 18, 2021 |
| Redhat_linux | redhat-upgrade-kernelredhat-upgrade-kernel-rt | Aug 12, 2021 | May 26, 2021 | |
| Rocky_linux | rocky-upgrade-bpftoolrocky-upgrade-bpftool-debuginforocky-upgrade-kernelrocky-upgrade-kernel-corerocky-upgrade-kernel-cross-headersrocky-upgrade-kernel-debugrocky-upgrade-kernel-debug-corerocky-upgrade-kernel-debug-debuginforocky-upgrade-kernel-debug-develrocky-upgrade-kernel-debug-modulesrocky-upgrade-kernel-debug-modules-extrarocky-upgrade-kernel-debuginforocky-upgrade-kernel-debuginfo-common-x86_64rocky-upgrade-kernel-develrocky-upgrade-kernel-headersrocky-upgrade-kernel-modulesrocky-upgrade-kernel-modules-extrarocky-upgrade-kernel-rtrocky-upgrade-kernel-rt-corerocky-upgrade-kernel-rt-debugrocky-upgrade-kernel-rt-debug-corerocky-upgrade-kernel-rt-debug-debuginforocky-upgrade-kernel-rt-debug-develrocky-upgrade-kernel-rt-debug-modulesrocky-upgrade-kernel-rt-debug-modules-extrarocky-upgrade-kernel-rt-debuginforocky-upgrade-kernel-rt-debuginfo-common-x86_64rocky-upgrade-kernel-rt-develrocky-upgrade-kernel-rt-modulesrocky-upgrade-kernel-rt-modules-extrarocky-upgrade-kernel-toolsrocky-upgrade-kernel-tools-debuginforocky-upgrade-kernel-tools-libsrocky-upgrade-kernel-tools-libs-develrocky-upgrade-perfrocky-upgrade-perf-debuginforocky-upgrade-python3-perfrocky-upgrade-python3-perf-debuginfo | May 5, 2022 | May 26, 2021 | |
| Suse | — | suse-upgrade-cluster-md-kmp-64kbsuse-upgrade-cluster-md-kmp-azuresuse-upgrade-cluster-md-kmp-defaultsuse-upgrade-cluster-md-kmp-preemptsuse-upgrade-dlm-kmp-64kbsuse-upgrade-dlm-kmp-azuresuse-upgrade-dlm-kmp-defaultsuse-upgrade-dlm-kmp-preemptsuse-upgrade-dtb-alsuse-upgrade-dtb-allwinnersuse-upgrade-dtb-alterasuse-upgrade-dtb-amdsuse-upgrade-dtb-amlogicsuse-upgrade-dtb-apmsuse-upgrade-dtb-armsuse-upgrade-dtb-broadcomsuse-upgrade-dtb-caviumsuse-upgrade-dtb-exynossuse-upgrade-dtb-freescalesuse-upgrade-dtb-hisiliconsuse-upgrade-dtb-lgsuse-upgrade-dtb-marvellsuse-upgrade-dtb-mediateksuse-upgrade-dtb-nvidiasuse-upgrade-dtb-qcomsuse-upgrade-dtb-renesassuse-upgrade-dtb-rockchipsuse-upgrade-dtb-socionextsuse-upgrade-dtb-sprdsuse-upgrade-dtb-xilinxsuse-upgrade-dtb-ztesuse-upgrade-gfs2-kmp-64kbsuse-upgrade-gfs2-kmp-azuresuse-upgrade-gfs2-kmp-defaultsuse-upgrade-gfs2-kmp-preemptsuse-upgrade-kernel-64kbsuse-upgrade-kernel-64kb-develsuse-upgrade-kernel-64kb-extrasuse-upgrade-kernel-64kb-livepatch-develsuse-upgrade-kernel-64kb-optionalsuse-upgrade-kernel-azuresuse-upgrade-kernel-azure-basesuse-upgrade-kernel-azure-develsuse-upgrade-kernel-azure-extrasuse-upgrade-kernel-azure-livepatch-develsuse-upgrade-kernel-azure-optionalsuse-upgrade-kernel-debugsuse-upgrade-kernel-debug-basesuse-upgrade-kernel-debug-develsuse-upgrade-kernel-debug-livepatch-develsuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-basesuse-upgrade-kernel-default-base-rebuildsuse-upgrade-kernel-default-develsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-default-kgraftsuse-upgrade-kernel-default-kgraft-develsuse-upgrade-kernel-default-livepatchsuse-upgrade-kernel-default-livepatch-develsuse-upgrade-kernel-default-mansuse-upgrade-kernel-default-optionalsuse-upgrade-kernel-develsuse-upgrade-kernel-devel-azuresuse-upgrade-kernel-docssuse-upgrade-kernel-docs-htmlsuse-upgrade-kernel-kvmsmallsuse-upgrade-kernel-kvmsmall-basesuse-upgrade-kernel-kvmsmall-develsuse-upgrade-kernel-kvmsmall-livepatch-develsuse-upgrade-kernel-livepatch-4_12_14-150_58-defaultsuse-upgrade-kernel-livepatch-4_12_14-150_63-defaultsuse-upgrade-kernel-livepatch-4_12_14-150_66-defaultsuse-upgrade-kernel-livepatch-4_12_14-150_69-defaultsuse-upgrade-kernel-livepatch-4_12_14-150_72-defaultsuse-upgrade-kernel-livepatch-4_12_14-150_75-defaultsuse-upgrade-kernel-livepatch-4_12_14-150_78-defaultsuse-upgrade-kernel-livepatch-4_12_14-197_102-defaultsuse-upgrade-kernel-livepatch-4_12_14-197_51-defaultsuse-upgrade-kernel-livepatch-4_12_14-197_56-defaultsuse-upgrade-kernel-livepatch-4_12_14-197_61-defaultsuse-upgrade-kernel-livepatch-4_12_14-197_64-defaultsuse-upgrade-kernel-livepatch-4_12_14-197_67-defaultsuse-upgrade-kernel-livepatch-4_12_14-197_72-defaultsuse-upgrade-kernel-livepatch-4_12_14-197_75-defaultsuse-upgrade-kernel-livepatch-4_12_14-197_78-defaultsuse-upgrade-kernel-livepatch-4_12_14-197_83-defaultsuse-upgrade-kernel-livepatch-4_12_14-197_86-defaultsuse-upgrade-kernel-livepatch-4_12_14-197_89-defaultsuse-upgrade-kernel-livepatch-4_12_14-197_92-defaultsuse-upgrade-kernel-livepatch-4_12_14-197_99-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_12-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_15-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_24-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_29-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_34-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_37-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_43-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_46-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_49-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_52-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_53_4-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_61-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_64-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_67-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_70-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_75-defaultsuse-upgrade-kernel-livepatch-5_3_18-24_78-defaultsuse-upgrade-kernel-livepatch-5_3_18-57-defaultsuse-upgrade-kernel-livepatch-5_3_18-59_10-defaultsuse-upgrade-kernel-livepatch-5_3_18-59_13-defaultsuse-upgrade-kernel-livepatch-5_3_18-59_16-defaultsuse-upgrade-kernel-livepatch-5_3_18-59_19-defaultsuse-upgrade-kernel-livepatch-5_3_18-59_5-defaultsuse-upgrade-kernel-macrossuse-upgrade-kernel-obs-buildsuse-upgrade-kernel-obs-qasuse-upgrade-kernel-preemptsuse-upgrade-kernel-preempt-develsuse-upgrade-kernel-preempt-extrasuse-upgrade-kernel-preempt-livepatch-develsuse-upgrade-kernel-preempt-optionalsuse-upgrade-kernel-sourcesuse-upgrade-kernel-source-azuresuse-upgrade-kernel-source-vanillasuse-upgrade-kernel-symssuse-upgrade-kernel-syms-azuresuse-upgrade-kernel-vanillasuse-upgrade-kernel-vanilla-basesuse-upgrade-kernel-vanilla-develsuse-upgrade-kernel-vanilla-livepatch-develsuse-upgrade-kernel-zfcpdumpsuse-upgrade-kernel-zfcpdump-mansuse-upgrade-kgraft-patch-4_12_14-122_32-defaultsuse-upgrade-kgraft-patch-4_12_14-122_37-defaultsuse-upgrade-kgraft-patch-4_12_14-122_41-defaultsuse-upgrade-kgraft-patch-4_12_14-122_46-defaultsuse-upgrade-kgraft-patch-4_12_14-122_51-defaultsuse-upgrade-kgraft-patch-4_12_14-122_54-defaultsuse-upgrade-kgraft-patch-4_12_14-122_57-defaultsuse-upgrade-kgraft-patch-4_12_14-122_60-defaultsuse-upgrade-kgraft-patch-4_12_14-122_63-defaultsuse-upgrade-kgraft-patch-4_12_14-122_66-defaultsuse-upgrade-kgraft-patch-4_12_14-122_71-defaultsuse-upgrade-kgraft-patch-4_12_14-122_74-defaultsuse-upgrade-kgraft-patch-4_12_14-122_77-defaultsuse-upgrade-kgraft-patch-4_12_14-122_80-defaultsuse-upgrade-kgraft-patch-4_12_14-122_83-defaultsuse-upgrade-kgraft-patch-4_12_14-95_60-defaultsuse-upgrade-kgraft-patch-4_12_14-95_65-defaultsuse-upgrade-kgraft-patch-4_12_14-95_68-defaultsuse-upgrade-kgraft-patch-4_12_14-95_71-defaultsuse-upgrade-kgraft-patch-4_12_14-95_74-defaultsuse-upgrade-kgraft-patch-4_12_14-95_77-defaultsuse-upgrade-kgraft-patch-4_12_14-95_80-defaultsuse-upgrade-kgraft-patch-4_12_14-95_83-defaultsuse-upgrade-kselftests-kmp-64kbsuse-upgrade-kselftests-kmp-azuresuse-upgrade-kselftests-kmp-defaultsuse-upgrade-kselftests-kmp-preemptsuse-upgrade-ocfs2-kmp-64kbsuse-upgrade-ocfs2-kmp-azuresuse-upgrade-ocfs2-kmp-defaultsuse-upgrade-ocfs2-kmp-preemptsuse-upgrade-reiserfs-kmp-64kbsuse-upgrade-reiserfs-kmp-azuresuse-upgrade-reiserfs-kmp-defaultsuse-upgrade-reiserfs-kmp-preempt | Aug 11, 2021 | May 26, 2021 |
| Ubuntu | ubuntu-upgrade-linux-image-4-15-0-1028-dell300xubuntu-upgrade-linux-image-4-15-0-1081-oracleubuntu-upgrade-linux-image-4-15-0-1096-raspi2ubuntu-upgrade-linux-image-4-15-0-1100-kvmubuntu-upgrade-linux-image-4-15-0-1109-gcpubuntu-upgrade-linux-image-4-15-0-1112-awsubuntu-upgrade-linux-image-4-15-0-1113-snapdragonubuntu-upgrade-linux-image-4-15-0-1124-azureubuntu-upgrade-linux-image-4-15-0-159-genericubuntu-upgrade-linux-image-4-15-0-159-generic-lpaeubuntu-upgrade-linux-image-4-15-0-159-lowlatencyubuntu-upgrade-linux-image-5-10-0-1049-oemubuntu-upgrade-linux-image-5-11-0-1015-azureubuntu-upgrade-linux-image-5-11-0-1015-kvmubuntu-upgrade-linux-image-5-11-0-1017-awsubuntu-upgrade-linux-image-5-11-0-1017-oracleubuntu-upgrade-linux-image-5-11-0-1017-raspiubuntu-upgrade-linux-image-5-11-0-1017-raspi-nolpaeubuntu-upgrade-linux-image-5-11-0-1018-gcpubuntu-upgrade-linux-image-5-11-0-34-genericubuntu-upgrade-linux-image-5-11-0-34-generic-64kubuntu-upgrade-linux-image-5-11-0-34-generic-lpaeubuntu-upgrade-linux-image-5-11-0-34-lowlatencyubuntu-upgrade-linux-image-5-4-0-1023-gkeopubuntu-upgrade-linux-image-5-4-0-1043-raspiubuntu-upgrade-linux-image-5-4-0-1046-kvmubuntu-upgrade-linux-image-5-4-0-1052-gcpubuntu-upgrade-linux-image-5-4-0-1052-gkeubuntu-upgrade-linux-image-5-4-0-1054-oracleubuntu-upgrade-linux-image-5-4-0-1056-awsubuntu-upgrade-linux-image-5-4-0-1058-azureubuntu-upgrade-linux-image-5-4-0-84-genericubuntu-upgrade-linux-image-5-4-0-84-generic-lpaeubuntu-upgrade-linux-image-5-4-0-84-lowlatencyubuntu-upgrade-linux-image-5-8-0-1043-azureubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-aws-lts-18-04ubuntu-upgrade-linux-image-aws-lts-20-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-lts-18-04ubuntu-upgrade-linux-image-azure-lts-20-04ubuntu-upgrade-linux-image-dell300xubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-lts-18-04ubuntu-upgrade-linux-image-gcp-lts-20-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-64kubuntu-upgrade-linux-image-generic-64k-hwe-20-04ubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-hwe-20-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-18-04ubuntu-upgrade-linux-image-generic-lpae-hwe-20-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-5-4ubuntu-upgrade-linux-image-gkeopubuntu-upgrade-linux-image-gkeop-5-4ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-lowlatency-hwe-20-04ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oem-20-04ubuntu-upgrade-linux-image-oem-20-04bubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-lts-18-04ubuntu-upgrade-linux-image-oracle-lts-20-04ubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-hwe-18-04ubuntu-upgrade-linux-image-raspi-nolpaeubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragonubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-16-04ubuntu-upgrade-linux-image-virtual-hwe-18-04ubuntu-upgrade-linux-image-virtual-hwe-20-04 | Sep 9, 2021 | May 26, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | May 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub