A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate their privileges on the system.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Jun 1, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-debuginfo | Jul 4, 2022 | Jun 1, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 2, 2021 | Jun 1, 2021 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 1, 2021 |
| Oracle_linux | — | Upgrade kernel | Jun 3, 2021 | Apr 29, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 2, 2021 | Jun 1, 2021 |
| Rocky_linux | — | Upgrade python3-perfUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-tools-libs-devel | May 5, 2022 | Jun 1, 2021 |
| Ubuntu | — | Upgrade linux-image-5.11.0-1010-oracleUpgrade linux-image-5.11.0-1009-azureUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-5.11.0-1009-kvmUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-5.11.0-22-generic-lpaeUpgrade linux-image-5.11.0-1011-gcpUpgrade linux-image-5.11.0-22-genericUpgrade linux-image-azureUpgrade linux-image-5.11.0-22-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-5.11.0-1012-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.11.0-22-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.11.0-1012-raspiUpgrade linux-image-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.10.0-1033-oemUpgrade linux-image-generic-64kUpgrade linux-image-awsUpgrade linux-image-5.11.0-1011-aws | Jun 23, 2021 | Jun 1, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 1, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub