A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 29, 2021 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade microvm-kernelUpgrade kernel-livepatch-5.10.62-55.141Upgrade microvm-kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade perfUpgrade microvm-kernel-develUpgrade python-perf-debuginfoUpgrade kernelUpgrade microvm-kernel-debuginfoUpgrade kernel-livepatch-4.14.246-187.474Upgrade kernel-develUpgrade microvm-kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo | Sep 16, 2021 | Sep 16, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 16, 2021 | Sep 15, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Sep 29, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-headers | Mar 22, 2022 | Sep 29, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Nov 12, 2021 | Nov 11, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 17, 2021 | Aug 16, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 16, 2021 | Sep 15, 2021 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perfUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfo | Mar 12, 2024 | Sep 29, 2021 |
| Suse | — | Upgrade kernel-vanilla-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-ec2-develUpgrade kernel-defaultUpgrade kernel-docsUpgrade kselftests-kmp-preemptUpgrade dtb-zteUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade dlm-kmp-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-preempt-extraUpgrade kernel-debug-baseUpgrade kernel-default-base-rebuildUpgrade kernel-preemptUpgrade dtb-alUpgrade kernel-64kb-develUpgrade kernel-preempt-develUpgrade kernel-ppc64Upgrade kernel-ppc64-baseUpgrade dtb-caviumUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade dtb-nvidiaUpgrade kernel-pae-baseUpgrade kernel-obs-buildUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-xen-develUpgrade kernel-vanilla-baseUpgrade dtb-xilinxUpgrade kernel-ppc64-develUpgrade kernel-azure-develUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade dtb-apmUpgrade cluster-md-kmp-preemptUpgrade dtb-rockchipUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade kernel-devel-azureUpgrade kernel-xen-baseUpgrade dtb-sprdUpgrade kernel-obs-qaUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kernel-ec2-baseUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-preemptUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kernel-bigmemUpgrade kernel-preempt-optionalUpgrade reiserfs-kmp-preemptUpgrade kernel-default-kgraftUpgrade kernel-pae-develUpgrade kernel-debug-livepatch-develUpgrade dtb-alteraUpgrade kernel-64kb-livepatch-develUpgrade dtb-socionextUpgrade kernel-preempt-livepatch-develUpgrade kernel-paeUpgrade kernel-bigmem-develUpgrade kernel-trace-baseUpgrade kernel-debug-develUpgrade kernel-trace-develUpgrade kernel-source-vanillaUpgrade kernel-azure-baseUpgrade dtb-marvellUpgrade kernel-default-manUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-kvmsmall-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade kernel-traceUpgrade kernel-zfcpdump-manUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-azureUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade kernel-vanilla-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-bigmem-baseUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade dtb-amlogicUpgrade dtb-amdUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-preemptUpgrade dtb-lgUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-xenUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-vanillaUpgrade kernel-ec2 | Sep 16, 2021 | Aug 16, 2021 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-5.11.0-34-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1046-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-84-generic-lpaeUpgrade linux-image-5.10.0-1045-oemUpgrade linux-image-gcpUpgrade linux-image-5.4.0-84-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1027-dell300xUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1080-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-156-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-5.8.0-1041-azureUpgrade linux-image-5.11.0-1017-awsUpgrade linux-image-4.15.0-1123-azureUpgrade linux-image-5.4.0-84-genericUpgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1058-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-4.4.0-1097-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.4.0-214-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1108-gcpUpgrade linux-image-5.4.0-1054-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-4.4.0-1096-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1023-gkeopUpgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-generic-64kUpgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-4.15.0-1099-kvmUpgrade linux-image-5.11.0-1017-raspi-nolpaeUpgrade linux-image-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-5.4.0-1056-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.11.0-1015-azureUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1111-awsUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1052-gkeUpgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-gkeop-5.4Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-156-generic-lpaeUpgrade linux-image-4.15.0-1112-snapdragonUpgrade linux-image-raspiUpgrade linux-image-4.4.0-1132-awsUpgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-dell300xUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-156-lowlatencyUpgrade linux-image-4.4.0-214-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.13.0-1012-oemUpgrade linux-image-5.4.0-1052-gcp | Sep 8, 2021 | Aug 16, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub