A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 29, 2021 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade microvm-kernelUpgrade microvm-kernel-headersUpgrade kernel-livepatch-5.10.62-55.141Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftoolUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade microvm-kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.246-187.474Upgrade microvm-kernel-develUpgrade kernel-develUpgrade microvm-kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfo | Sep 16, 2021 | Sep 16, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Sep 16, 2021 | Sep 15, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Sep 29, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-develUpgrade kernel-headers | Mar 22, 2022 | Sep 29, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Nov 12, 2021 | Nov 11, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 17, 2021 | Aug 16, 2021 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 16, 2021 | Sep 15, 2021 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-tools-debuginfo | Mar 12, 2024 | Sep 29, 2021 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-default-manUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-trace-develUpgrade kselftests-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-macrosUpgrade dtb-socionextUpgrade kernel-paeUpgrade dtb-freescaleUpgrade kernel-64kb-livepatch-develUpgrade kernel-preempt-optionalUpgrade kernel-bigmemUpgrade kernel-azure-baseUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-pae-develUpgrade kernel-vanillaUpgrade kernel-default-kgraftUpgrade dtb-renesasUpgrade dtb-alteraUpgrade dtb-marvellUpgrade kernel-kvmsmall-baseUpgrade kernel-default-develUpgrade kernel-ec2Upgrade kernel-azureUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-preemptUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-bigmem-baseUpgrade kernel-trace-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-bigmem-develUpgrade kernel-64kbUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-vanilla-develUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kernel-zfcpdump-manUpgrade gfs2-kmp-preemptUpgrade reiserfs-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-xenUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-traceUpgrade dlm-kmp-defaultUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade kernel-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-develUpgrade dlm-kmp-preemptUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-ec2-baseUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-pae-baseUpgrade kernel-vanilla-baseUpgrade kernel-preempt-extraUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-azure-livepatch-develUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-preempt-develUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade dtb-apmUpgrade dtb-zteUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade kernel-xen-baseUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-alUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade kernel-debug-baseUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade dtb-sprdUpgrade kernel-ppc64-baseUpgrade gfs2-kmp-defaultUpgrade kernel-xen-develUpgrade kernel-ppc64Upgrade kernel-vanilla-livepatch-develUpgrade kselftests-kmp-preemptUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-ppc64-develUpgrade dtb-rockchipUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade cluster-md-kmp-preemptUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade dtb-mediatekUpgrade dtb-allwinner | Sep 16, 2021 | Aug 16, 2021 |
| Ubuntu | — | Upgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-4.4.0-214-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-156-lowlatencyUpgrade linux-image-5.4.0-1052-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-aws-hweUpgrade linux-image-raspiUpgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-5.11.0-1017-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-oem-osp1Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.11.0-1015-azureUpgrade linux-image-5.13.0-1012-oemUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1111-awsUpgrade linux-image-5.4.0-1052-gcpUpgrade linux-image-generic-64kUpgrade linux-image-dell300xUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1023-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1112-snapdragonUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1056-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1099-kvmUpgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-1096-awsUpgrade linux-image-4.4.0-1132-awsUpgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-156-generic-lpaeUpgrade linux-image-4.4.0-1097-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.4Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1046-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1054-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1027-dell300xUpgrade linux-image-5.4.0-1058-azureUpgrade linux-image-5.4.0-84-genericUpgrade linux-image-4.4.0-214-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.8.0-1041-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-kvmUpgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-5.11.0-34-genericUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-84-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1080-oracleUpgrade linux-image-5.10.0-1045-oemUpgrade linux-image-oemUpgrade linux-image-4.15.0-1123-azureUpgrade linux-image-5.4.0-84-generic-lpaeUpgrade linux-image-5.11.0-1017-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-156-genericUpgrade linux-image-4.15.0-1108-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-virtual | Sep 8, 2021 | Aug 16, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub