A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade microvm-kernel-headersUpgrade python-perf-debuginfoUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade microvm-kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.62-55.141Upgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade microvm-kernelUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade microvm-kernel-develUpgrade kernel-livepatch-4.14.246-187.474Upgrade kernelUpgrade microvm-kernel-debuginfoUpgrade bpftool-debuginfo | Sep 16, 2021 | Sep 16, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 14, 2021 | Oct 12, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Nov 29, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Nov 12, 2021 | Nov 11, 2021 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 17, 2021 | Aug 16, 2021 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 29, 2021 | Sep 28, 2021 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfoUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-rt | May 5, 2022 | Mar 4, 2022 |
| Suse | — | Upgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-azure-baseUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-vanillaUpgrade kernel-zfcpdump-manUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade ocfs2-kmp-preemptUpgrade kernel-devel-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-preempt-optionalUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade cluster-md-kmp-defaultUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-preemptUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-vanilla-develUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade reiserfs-kmp-preemptUpgrade kernel-sourceUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-alteraUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-source-azureUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade kernel-default-manUpgrade kernel-vanilla-baseUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-debug-baseUpgrade kernel-preempt-extraUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dlm-kmp-preemptUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade dtb-qcomUpgrade kernel-azure-livepatch-develUpgrade dtb-zteUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-kvmsmall-baseUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kselftests-kmp-preemptUpgrade gfs2-kmp-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-preempt-develUpgrade dtb-allwinnerUpgrade gfs2-kmp-preemptUpgrade kernel-preemptUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade dtb-alUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade ocfs2-kmp-default | Sep 16, 2021 | Aug 16, 2021 |
| Ubuntu | — | Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-84-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1052-gcpUpgrade linux-image-5.4.0-84-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1054-oracleUpgrade linux-image-4.15.0-156-genericUpgrade linux-image-4.15.0-156-lowlatencyUpgrade linux-image-4.15.0-1080-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1056-awsUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-84-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-dell300xUpgrade linux-image-gkeopUpgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1058-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.13.0-1012-oemUpgrade linux-image-4.15.0-1027-dell300xUpgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-5.4.0-1052-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1111-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1046-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.8.0-1041-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.10.0-1045-oemUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-5.11.0-1017-raspi-nolpaeUpgrade linux-image-4.15.0-1108-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-156-generic-lpaeUpgrade linux-image-5.4.0-1023-gkeopUpgrade linux-image-snapdragonUpgrade linux-image-5.11.0-34-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-4.15.0-1123-azureUpgrade linux-image-4.15.0-1099-kvmUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.11.0-1017-awsUpgrade linux-image-4.15.0-1112-snapdragonUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.11.0-1015-azureUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04 | Sep 9, 2021 | Aug 16, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub