A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 29, 2021 |
| Amazon Linux Ami 2 | — | Upgrade microvm-kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade microvm-kernelUpgrade bpftoolUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.62-55.141Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.246-187.474Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade microvm-kernel-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade microvm-kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade microvm-kernel-debuginfo | Sep 16, 2021 | Sep 16, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 16, 2021 | Sep 15, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Sep 29, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-develUpgrade kernel-headers | Mar 22, 2022 | Sep 29, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Nov 12, 2021 | Nov 11, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 17, 2021 | Aug 16, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 16, 2021 | Sep 15, 2021 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-rt-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-core | Mar 12, 2024 | Sep 29, 2021 |
| Suse | — | Upgrade dtb-xilinxUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade dlm-kmp-preemptUpgrade kernel-ec2-baseUpgrade dtb-rockchipUpgrade cluster-md-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade dtb-alUpgrade kernel-xen-baseUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-debug-baseUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-preemptUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-develUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kernel-azure-develUpgrade kernel-ec2-develUpgrade kernel-vanilla-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade dtb-apmUpgrade dtb-qcomUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kernel-ppc64-develUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-ppc64-baseUpgrade kernel-kvmsmallUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade kernel-ppc64Upgrade kernel-syms-azureUpgrade dtb-caviumUpgrade kernel-obs-qaUpgrade kernel-preempt-extraUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-develUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-pae-baseUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade dtb-zteUpgrade kernel-devel-azureUpgrade kernel-xen-develUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-vanilla-baseUpgrade kernel-default-optionalUpgrade kselftests-kmp-preemptUpgrade kernel-source-vanillaUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade kernel-preempt-livepatch-develUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kernel-xenUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade dtb-lgUpgrade kernel-debugUpgrade kernel-azureUpgrade kernel-bigmem-develUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-bigmem-baseUpgrade kernel-vanilla-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-paeUpgrade kernel-debug-develUpgrade kernel-trace-develUpgrade kernel-trace-baseUpgrade kernel-kvmsmall-baseUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-vanillaUpgrade kernel-ec2Upgrade kernel-pae-develUpgrade kernel-default-kgraftUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade ocfs2-kmp-preemptUpgrade kernel-preempt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-bigmemUpgrade kernel-source-azureUpgrade gfs2-kmp-preemptUpgrade dtb-broadcomUpgrade kernel-zfcpdump-manUpgrade reiserfs-kmp-preemptUpgrade kernel-traceUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade dtb-amdUpgrade cluster-md-kmp-azure | Sep 16, 2021 | Aug 16, 2021 |
| Ubuntu | — | Upgrade linux-image-aws-hweUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1052-gcpUpgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-4.15.0-156-lowlatencyUpgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-4.4.0-1132-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-214-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1023-gkeopUpgrade linux-image-5.11.0-1017-raspi-nolpaeUpgrade linux-image-dell300xUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-1112-snapdragonUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1056-awsUpgrade linux-image-4.15.0-1099-kvmUpgrade linux-image-4.15.0-1111-awsUpgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.13.0-1012-oemUpgrade linux-image-oem-osp1Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-5.11.0-1015-azureUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-156-generic-lpaeUpgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-5.4.0-1052-gkeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-156-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-84-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1123-azureUpgrade linux-image-5.11.0-1017-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1080-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-84-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1054-oracleUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oemUpgrade linux-image-4.4.0-214-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.4.0-1097-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1108-gcpUpgrade linux-image-4.15.0-1027-dell300xUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1058-azureUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1046-kvmUpgrade linux-image-5.11.0-34-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.8.0-1041-azureUpgrade linux-image-gkeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-5.4.0-84-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.10.0-1045-oem | Sep 8, 2021 | Aug 16, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub