The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Mar 4, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-livepatch-4.14.246-187.474Upgrade microvm-kernel-develUpgrade kernel-tools-debuginfoUpgrade microvm-kernel-debuginfoUpgrade microvm-kernelUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade microvm-kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade microvm-kernel-headersUpgrade microvm-kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.62-55.141Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools | Sep 16, 2021 | Sep 16, 2021 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 14, 2021 | Oct 12, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Nov 29, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Nov 12, 2021 | Nov 11, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 17, 2021 | Aug 16, 2021 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 29, 2021 | Sep 28, 2021 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-toolsUpgrade perfUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-debug-devel | May 5, 2022 | Mar 4, 2022 |
| Suse | — | Upgrade kernel-preempt-livepatch-develUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade ocfs2-kmp-preemptUpgrade kernel-64kb-optionalUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade dtb-renesasUpgrade kernel-macrosUpgrade dtb-amdUpgrade kernel-vanillaUpgrade kernel-debugUpgrade kernel-zfcpdump-manUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-azure-baseUpgrade dtb-xilinxUpgrade kernel-azure-extraUpgrade kernel-vanilla-develUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade kernel-symsUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade reiserfs-kmp-preemptUpgrade dtb-marvellUpgrade kernel-preempt-optionalUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-develUpgrade cluster-md-kmp-preemptUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade dtb-alUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade kernel-vanilla-baseUpgrade dtb-caviumUpgrade kernel-preempt-develUpgrade kernel-preemptUpgrade gfs2-kmp-preemptUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-zteUpgrade dtb-armUpgrade kernel-vanilla-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-default-manUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-baseUpgrade kselftests-kmp-preemptUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-azure-develUpgrade kernel-preempt-extraUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-debug-base | Sep 16, 2021 | Aug 16, 2021 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1099-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-1017-awsUpgrade linux-image-5.10.0-1045-oemUpgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-5.11.0-1017-raspi-nolpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.11.0-1015-azureUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1023-gkeopUpgrade linux-image-4.15.0-1108-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.11.0-34-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-156-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-snapdragonUpgrade linux-image-oemUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1123-azureUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-4.15.0-1112-snapdragonUpgrade linux-image-raspiUpgrade linux-image-5.4.0-84-generic-lpaeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-1111-awsUpgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-5.4.0-84-genericUpgrade linux-image-virtualUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1027-dell300xUpgrade linux-image-4.15.0-156-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-dell300xUpgrade linux-image-5.4.0-1054-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.13.0-1012-oemUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-84-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1080-oracleUpgrade linux-image-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64kUpgrade linux-image-5.8.0-1041-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1058-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1052-gkeUpgrade linux-image-4.15.0-156-genericUpgrade linux-image-5.4.0-1052-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-5.4.0-1046-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1056-aws | Sep 9, 2021 | Aug 16, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 4, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub