An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation.
CVSS Details
- CVSS 4.0 Base Score: 9.3 (Critical)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L)
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | May 26, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.243-185.433Upgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headers | Aug 25, 2021 | May 26, 2021 |
| Amazon_linux | — | Upgrade kernel | Oct 5, 2021 | May 26, 2021 |
| Centos_linux | — | Upgrade kpatch-patch-3_10_0-1160_2_2-debuginfoUpgrade kpatch-patch-4_18_0-305_10_2Upgrade kpatch-patch-3_10_0-1160_41_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_41_1Upgrade kpatch-patch-3_10_0-1160_11_1-debuginfoUpgrade kpatch-patch-4_18_0-305_7_1Upgrade kpatch-patch-4_18_0-305_10_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_15_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_42_2-debuginfoUpgrade kpatch-patch-3_10_0-1160_21_1Upgrade kpatch-patch-3_10_0-1160_2_2Upgrade kpatch-patch-4_18_0-305_3_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_6_1Upgrade kpatch-patch-4_18_0-305Upgrade kpatch-patch-4_18_0-305_3_1Upgrade kpatch-patch-3_10_0-1160_15_2Upgrade kpatch-patch-4_18_0-305_3_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_36_2-debuginfoUpgrade kernel-rtUpgrade kpatch-patch-4_18_0-305-debuginfoUpgrade kpatch-patch-4_18_0-305-debugsourceUpgrade kpatch-patch-3_10_0-1160_11_1Upgrade kpatch-patch-3_10_0-1160_6_1-debuginfoUpgrade kpatch-patch-4_18_0-305_7_1-debugsourceUpgrade kpatch-patch-3_10_0-1160_21_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_24_1-debuginfoUpgrade kpatch-patch-4_18_0-305_10_2-debugsourceUpgrade kpatch-patch-3_10_0-1160_25_1Upgrade kpatch-patch-4_18_0-305_7_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_2_1-debuginfoUpgrade kernelUpgrade kpatch-patch-3_10_0-1160_24_1Upgrade kpatch-patch-3_10_0-1160_31_1Upgrade kpatch-patch-3_10_0-1160_36_2Upgrade kpatch-patch-3_10_0-1160_25_1-debuginfoUpgrade kpatch-patch-3_10_0-1160_2_1Upgrade kpatch-patch-3_10_0-1160_42_2Upgrade kpatch-patch-3_10_0-1160_31_1-debuginfo | Aug 12, 2021 | May 26, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | May 26, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Apr 19, 2022 | May 26, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 12, 2021 | May 18, 2021 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 12, 2021 | May 26, 2021 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-cross-headersUpgrade perfUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-rt-modules-extra | May 5, 2022 | May 26, 2021 |
| Suse | — | Upgrade kernel-livepatch-5_3_18-24_64-defaultUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade kernel-livepatch-4_12_14-197_83-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-baseUpgrade kernel-livepatch-4_12_14-197_75-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-livepatch-5_3_18-24_46-defaultUpgrade kernel-livepatch-5_3_18-59_5-defaultUpgrade kernel-debug-baseUpgrade kernel-livepatch-4_12_14-197_78-defaultUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade kernel-livepatch-4_12_14-197_99-defaultUpgrade kernel-livepatch-5_3_18-24_34-defaultUpgrade kernel-livepatch-5_3_18-24_61-defaultUpgrade kernel-symsUpgrade kernel-livepatch-5_3_18-24_12-defaultUpgrade kernel-devel-azureUpgrade kgraft-patch-4_12_14-95_74-defaultUpgrade dtb-marvellUpgrade kernel-livepatch-5_3_18-24_70-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-vanillaUpgrade kernel-preemptUpgrade kernel-macrosUpgrade kernel-livepatch-4_12_14-197_64-defaultUpgrade kernel-vanilla-baseUpgrade kgraft-patch-4_12_14-122_66-defaultUpgrade ocfs2-kmp-preemptUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-livepatch-5_3_18-24_49-defaultUpgrade dtb-broadcomUpgrade cluster-md-kmp-preemptUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade kernel-livepatch-5_3_18-24_78-defaultUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade kernel-livepatch-4_12_14-150_58-defaultUpgrade kernel-default-extraUpgrade kernel-livepatch-4_12_14-197_89-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-livepatch-4_12_14-150_63-defaultUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade kernel-default-kgraftUpgrade dtb-freescaleUpgrade kgraft-patch-4_12_14-122_74-defaultUpgrade kgraft-patch-4_12_14-95_83-defaultUpgrade kernel-livepatch-5_3_18-24_29-defaultUpgrade kernel-livepatch-5_3_18-59_10-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-livepatch-5_3_18-24_43-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-livepatch-4_12_14-150_72-defaultUpgrade kernel-livepatch-5_3_18-24_75-defaultUpgrade kernel-livepatch-5_3_18-59_13-defaultUpgrade kernel-preempt-livepatch-develUpgrade dtb-amdUpgrade kernel-vanilla-develUpgrade kernel-livepatch-5_3_18-24_53_4-defaultUpgrade kgraft-patch-4_12_14-122_46-defaultUpgrade kernel-livepatch-4_12_14-197_67-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade dtb-allwinnerUpgrade kernel-livepatch-4_12_14-197_51-defaultUpgrade kernel-livepatch-4_12_14-197_102-defaultUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade kgraft-patch-4_12_14-122_71-defaultUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-livepatch-4_12_14-197_56-defaultUpgrade dtb-xilinxUpgrade kernel-vanilla-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-azureUpgrade kgraft-patch-4_12_14-95_60-defaultUpgrade kernel-livepatch-4_12_14-150_75-defaultUpgrade kernel-livepatch-5_3_18-24_67-defaultUpgrade kgraft-patch-4_12_14-122_77-defaultUpgrade kgraft-patch-4_12_14-95_65-defaultUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-preemptUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kgraft-patch-4_12_14-95_71-defaultUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-livepatch-5_3_18-24_37-defaultUpgrade kgraft-patch-4_12_14-122_32-defaultUpgrade kgraft-patch-4_12_14-122_57-defaultUpgrade kgraft-patch-4_12_14-122_63-defaultUpgrade kernel-livepatch-5_3_18-57-defaultUpgrade kernel-default-manUpgrade kernel-livepatch-4_12_14-197_61-defaultUpgrade kernel-sourceUpgrade kernel-64kb-extraUpgrade kernel-livepatch-4_12_14-150_78-defaultUpgrade kernel-livepatch-4_12_14-150_69-defaultUpgrade dtb-alUpgrade kernel-docsUpgrade kgraft-patch-4_12_14-122_51-defaultUpgrade kernel-livepatch-4_12_14-197_92-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-armUpgrade kernel-livepatch-5_3_18-59_19-defaultUpgrade kernel-livepatch-5_3_18-24_24-defaultUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade dtb-renesasUpgrade kernel-zfcpdump-manUpgrade dtb-zteUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade kernel-livepatch-5_3_18-59_16-defaultUpgrade cluster-md-kmp-64kbUpgrade kgraft-patch-4_12_14-95_68-defaultUpgrade kernel-livepatch-5_3_18-24_15-defaultUpgrade kgraft-patch-4_12_14-122_37-defaultUpgrade kernel-default-baseUpgrade kgraft-patch-4_12_14-122_41-defaultUpgrade kernel-default-kgraft-develUpgrade kernel-default-livepatch-develUpgrade kernel-livepatch-4_12_14-197_72-defaultUpgrade kgraft-patch-4_12_14-122_60-defaultUpgrade dtb-rockchipUpgrade kernel-livepatch-4_12_14-150_66-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-livepatch-5_3_18-24_52-defaultUpgrade kgraft-patch-4_12_14-122_54-defaultUpgrade kernel-livepatch-4_12_14-197_86-defaultUpgrade gfs2-kmp-preemptUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-preempt-optionalUpgrade kgraft-patch-4_12_14-95_80-defaultUpgrade kernel-develUpgrade dlm-kmp-preemptUpgrade kernel-preempt-extraUpgrade kgraft-patch-4_12_14-95_77-defaultUpgrade kgraft-patch-4_12_14-122_83-defaultUpgrade kgraft-patch-4_12_14-122_80-defaultUpgrade kernel-preempt-devel | Aug 11, 2021 | May 26, 2021 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-4.15.0-1113-snapdragonUpgrade linux-image-4.15.0-1096-raspi2Upgrade linux-image-5.4.0-84-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1052-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-dell300xUpgrade linux-image-4.15.0-1100-kvmUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1109-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-84-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-oemUpgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-5.11.0-1015-azureUpgrade linux-image-azureUpgrade linux-image-5.4.0-1023-gkeopUpgrade linux-image-5.11.0-34-genericUpgrade linux-image-4.15.0-1028-dell300xUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-5.11.0-1017-raspi-nolpaeUpgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-84-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.8.0-1043-azureUpgrade linux-image-4.15.0-159-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1046-kvmUpgrade linux-image-5.4.0-1052-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1043-raspiUpgrade linux-image-5.4.0-1054-oracleUpgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-oem-osp1Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.10.0-1049-oemUpgrade linux-image-5.4.0-1056-awsUpgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1124-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1058-azureUpgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-159-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.11.0-1017-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1112-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-159-genericUpgrade linux-image-4.15.0-1081-oracleUpgrade linux-image-generic-lpae-hwe-18.04 | Sep 9, 2021 | May 26, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub