A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Sep 29, 2021 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernelUpgrade microvm-kernel-develUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade microvm-kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade microvm-kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.246-187.474Upgrade bpftoolUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade microvm-kernel-headersUpgrade python-perfUpgrade bpftool-debuginfoUpgrade microvm-kernelUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.62-55.141Upgrade kernel-debuginfo-common-aarch64 | Sep 16, 2021 | Sep 16, 2021 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Sep 16, 2021 | Sep 15, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Sep 29, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python-perf | Mar 22, 2022 | Sep 29, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Nov 12, 2021 | Nov 11, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 17, 2021 | Aug 16, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 16, 2021 | Sep 15, 2021 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-tools-libs | Mar 12, 2024 | Sep 29, 2021 |
| Suse | — | Upgrade dtb-caviumUpgrade dtb-zteUpgrade kernel-default-optionalUpgrade kernel-vanilla-livepatch-develUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-xen-develUpgrade dtb-sprdUpgrade kernel-obs-qaUpgrade kernel-preempt-extraUpgrade kernel-syms-azureUpgrade dtb-nvidiaUpgrade kernel-ppc64Upgrade kselftests-kmp-preemptUpgrade kernel-ec2-baseUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kernel-kvmsmallUpgrade kernel-ppc64-baseUpgrade kernel-devel-azureUpgrade kernel-64kb-extraUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-vanilla-baseUpgrade dtb-armUpgrade dlm-kmp-preemptUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-azure-livepatch-develUpgrade kernel-xen-baseUpgrade kernel-64kb-develUpgrade kernel-debug-baseUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2-develUpgrade dtb-mediatekUpgrade cluster-md-kmp-preemptUpgrade kernel-sourceUpgrade dlm-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kernel-pae-baseUpgrade kernel-obs-buildUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade dtb-rockchipUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kernel-preemptUpgrade dtb-alUpgrade kernel-ppc64-develUpgrade ocfs2-kmp-defaultUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade dtb-apmUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade kernel-default-kgraftUpgrade kernel-pae-develUpgrade kernel-source-azureUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-symsUpgrade dtb-amdUpgrade ocfs2-kmp-preemptUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kernel-bigmemUpgrade kernel-preempt-optionalUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade kernel-bigmem-baseUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-vanilla-develUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-azure-baseUpgrade dtb-marvellUpgrade kernel-kvmsmall-baseUpgrade kernel-source-vanillaUpgrade kernel-trace-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-paeUpgrade kernel-default-manUpgrade kernel-64kb-livepatch-develUpgrade kernel-bigmem-develUpgrade kernel-trace-baseUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-zfcpdump-manUpgrade kernel-azure-optionalUpgrade dtb-renesasUpgrade kernel-xenUpgrade dtb-alteraUpgrade gfs2-kmp-preemptUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade kernel-vanillaUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-ec2Upgrade kernel-traceUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kb | Sep 16, 2021 | Aug 16, 2021 |
| Ubuntu | — | Upgrade linux-image-5.11.0-1015-azureUpgrade linux-image-4.15.0-156-generic-lpaeUpgrade linux-image-4.15.0-1112-snapdragonUpgrade linux-image-genericUpgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-5.4.0-1056-awsUpgrade linux-image-5.4.0-1052-gkeUpgrade linux-image-5.11.0-1017-raspi-nolpaeUpgrade linux-image-4.4.0-1096-awsUpgrade linux-image-5.4.0-1052-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1023-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1111-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-4.4.0-214-lowlatencyUpgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-5.13.0-1012-oemUpgrade linux-image-dell300xUpgrade linux-image-4.4.0-1132-awsUpgrade linux-image-raspiUpgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1099-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-156-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-156-genericUpgrade linux-image-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.8.0-1041-azureUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1027-dell300xUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1046-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-5.11.0-34-genericUpgrade linux-image-virtualUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1054-oracleUpgrade linux-image-5.4.0-84-genericUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-214-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1108-gcpUpgrade linux-image-awsUpgrade linux-image-5.11.0-1017-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-gke-5.4Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-1097-kvmUpgrade linux-image-5.10.0-1045-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1080-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1123-azureUpgrade linux-image-5.4.0-84-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1058-azureUpgrade linux-image-5.4.0-84-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04 | Sep 8, 2021 | Aug 16, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 29, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub