arch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade microvm-kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade microvm-kernelUpgrade kernel-toolsUpgrade microvm-kernel-headersUpgrade bpftoolUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade microvm-kernel-debuginfoUpgrade microvm-kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade microvm-kernel-develUpgrade kernel-headersUpgrade kernel-livepatch-4.14.246-187.474Upgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Sep 16, 2021 | Aug 8, 2021 |
| Amazon_linux | — | Upgrade kernel | Oct 5, 2021 | Aug 8, 2021 |
| Debian | — | Upgrade linux | Nov 29, 2021 | Aug 8, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Nov 12, 2021 | Aug 8, 2021 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 12, 2021 | Jun 8, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 8, 2021 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-preemptUpgrade gfs2-kmp-64kbUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-ppc64Upgrade kernel-xenUpgrade kernel-xen-baseUpgrade kernel-default-develUpgrade kernel-traceUpgrade kernel-macrosUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kernel-preemptUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade kernel-debugUpgrade dtb-apmUpgrade kernel-azure-develUpgrade dtb-amdUpgrade dtb-lgUpgrade kernel-vanillaUpgrade kernel-obs-qaUpgrade kernel-pae-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-ppc64-develUpgrade dtb-armUpgrade kernel-64kbUpgrade kernel-ec2-develUpgrade kernel-paeUpgrade dtb-amlogicUpgrade reiserfs-kmp-preemptUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-debug-baseUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-manUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade dtb-xilinxUpgrade kernel-symsUpgrade dtb-mediatekUpgrade kernel-xen-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-ec2-baseUpgrade kernel-trace-baseUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kernel-bigmem-baseUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade dtb-alUpgrade kselftests-kmp-preemptUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-preemptUpgrade kernel-preempt-livepatch-develUpgrade kernel-preempt-develUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-preempt-optionalUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade dtb-marvellUpgrade kernel-trace-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-kgraftUpgrade kernel-bigmemUpgrade reiserfs-kmp-64kbUpgrade kernel-ppc64-baseUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-extraUpgrade dtb-sprdUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-vanilla-develUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-vanilla-baseUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade dtb-renesasUpgrade kernel-pae-develUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-kvmsmall-baseUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade dtb-zteUpgrade kernel-azureUpgrade kernel-vanilla-livepatch-develUpgrade kernel-bigmem-develUpgrade kernel-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-ec2Upgrade kgraft-patch-4_4_180-94_135-defaultUpgrade dlm-kmp-preemptUpgrade dtb-allwinner | Sep 16, 2021 | Aug 8, 2021 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1097-raspi2Upgrade linux-image-aws-hweUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-161-generic-lpaeUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-5.4.0-1056-oracleUpgrade linux-image-5.4.0-1025-gkeopUpgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-4.15.0-161-genericUpgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1048-kvmUpgrade linux-image-5.4.0-1045-raspiUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-5.4.0-1056-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1101-kvmUpgrade linux-image-5.4.0-89-lowlatencyUpgrade linux-image-5.4.0-1054-gkeUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1125-azureUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-4.15.0-1114-awsUpgrade linux-image-5.11.0-34-genericUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-5.11.0-1017-raspi-nolpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-161-lowlatencyUpgrade linux-image-5.4.0-1006-ibmUpgrade linux-image-snapdragonUpgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-5.4.0-1062-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-oracleUpgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1029-dell300xUpgrade linux-image-5.4.0-1020-bluefieldUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-222-genericUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oem-20.04Upgrade linux-image-dell300xUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1082-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-89-generic-lpaeUpgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-5.11.0-1015-azureUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1058-awsUpgrade linux-image-4.15.0-1113-awsUpgrade linux-image-4.15.0-1114-snapdragonUpgrade linux-image-5.4.0-1055-gcpUpgrade linux-image-5.4.0-89-genericUpgrade linux-image-virtualUpgrade linux-image-oemUpgrade linux-image-oem-osp1Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1110-gcpUpgrade linux-image-5.11.0-1017-aws | Sep 9, 2021 | Aug 8, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 8, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub