A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 29, 2021 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-4.14.246-187.474Upgrade microvm-kernel-debuginfoUpgrade kernel-tools-develUpgrade microvm-kernel-debuginfo-common-x86_64Upgrade microvm-kernel-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade microvm-kernel-headersUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade microvm-kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-5.10.62-55.141Upgrade python-perf | Sep 16, 2021 | Sep 16, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 16, 2021 | Sep 15, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Sep 29, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Mar 22, 2022 | Sep 29, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | Nov 12, 2021 | Nov 11, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 17, 2021 | Aug 16, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 16, 2021 | Sep 15, 2021 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernelUpgrade perfUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfo | Mar 12, 2024 | Sep 29, 2021 |
| Suse | — | Upgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade kernel-preempt-develUpgrade cluster-md-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade kernel-preemptUpgrade kernel-ppc64-baseUpgrade dlm-kmp-azureUpgrade kernel-preempt-extraUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-debug-baseUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-xen-develUpgrade kernel-64kb-develUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade dlm-kmp-preemptUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade dtb-apmUpgrade kernel-azure-develUpgrade kernel-ppc64-develUpgrade dtb-allwinnerUpgrade dtb-zteUpgrade dtb-armUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-vanilla-livepatch-develUpgrade kernel-syms-azureUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade kernel-ppc64Upgrade dtb-alUpgrade kselftests-kmp-preemptUpgrade kernel-ec2-baseUpgrade kernel-xen-baseUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade dtb-rockchipUpgrade kernel-develUpgrade kernel-ec2-develUpgrade kernel-devel-azureUpgrade kernel-vanilla-baseUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-pae-baseUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-preempt-optionalUpgrade dtb-freescaleUpgrade gfs2-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade gfs2-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade reiserfs-kmp-preemptUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-bigmem-baseUpgrade gfs2-kmp-64kbUpgrade kernel-azureUpgrade kernel-vanilla-develUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade dtb-amdUpgrade kernel-paeUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-traceUpgrade dtb-broadcomUpgrade kernel-bigmem-develUpgrade kernel-trace-baseUpgrade kernel-64kbUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade kernel-ec2Upgrade kernel-vanillaUpgrade kernel-default-kgraftUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade kernel-pae-develUpgrade kernel-bigmemUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-macrosUpgrade kernel-xenUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade kernel-debug-develUpgrade kernel-default-manUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kernel-preempt-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade kernel-kvmsmall-baseUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade dlm-kmp-defaultUpgrade kernel-trace-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-preemptUpgrade kernel-azure-baseUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-devel | Sep 16, 2021 | Aug 16, 2021 |
| Ubuntu | — | Upgrade linux-image-4.15.0-156-lowlatencyUpgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-4.15.0-1112-snapdragonUpgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1052-gkeUpgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-4.4.0-214-lowlatencyUpgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-5.13.0-1012-oemUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.11.0-1017-raspi-nolpaeUpgrade linux-image-5.11.0-1015-azureUpgrade linux-image-gkeopUpgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-5.4.0-1056-awsUpgrade linux-image-5.4.0-1023-gkeopUpgrade linux-image-4.4.0-1132-awsUpgrade linux-image-4.15.0-1099-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1111-awsUpgrade linux-image-dell300xUpgrade linux-image-5.4.0-1052-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-gkeop-5.4Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-156-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-aws-hweUpgrade linux-image-gkeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1046-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.8.0-1041-azureUpgrade linux-image-gke-5.4Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-214-genericUpgrade linux-image-5.4.0-84-generic-lpaeUpgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.11.0-34-genericUpgrade linux-image-5.4.0-84-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-5.11.0-1017-awsUpgrade linux-image-4.15.0-1027-dell300xUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1054-oracleUpgrade linux-image-4.15.0-1123-azureUpgrade linux-image-4.15.0-156-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.10.0-1045-oemUpgrade linux-image-4.15.0-1080-oracleUpgrade linux-image-5.4.0-84-genericUpgrade linux-image-4.4.0-1097-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1058-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.15.0-1108-gcpUpgrade linux-image-gcp-lts-18.04 | Sep 8, 2021 | Aug 16, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub