CVE-2021-46978 KVM: nVMX: Always make an attempt to map eVMCS after migration

🗓️ 28 Feb 2024 08:13:09Reported by LinuxType

KVM vulnerability: Always map eVMCS after migratio

Reporter	Title	Published	Views	Family All 22
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-002 (ALASKERNEL-5.10-2022-002)	2 May 202200:00	–	nessus
Tenable Nessus	RHEL 6 : kernel (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 7 : kernel (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	TencentOS Server 4: kernel (TSSA-2024:0958)	16 Jun 202500:00	–	nessus
Tenable Nessus	Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987000)	7 Oct 202500:00	–	nessus
Tenable Nessus	Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988997)	5 Nov 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2021-46978	5 Mar 202500:00	–	nessus
Amazon	Important: kernel	28 Jan 202200:00	–	amazon
BDU FSTEC	The vulnerability of the nested_get_evmcs_page() function in the arch/x86/kvm/vmx/nested.c module of the virtualization subsystem on the Linux operating system’s x86 kernel platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	18 Mar 202500:00	–	bdu_fstec
Circl	CVE-2021-46978	29 Feb 202410:11	–	circl

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "arch/x86/kvm/vmx/nested.c"
    ],
    "versions": [
      {
        "version": "0faceb7d6dda6f370ff1fa0464d7180f7e5cb417",
        "lessThan": "c8bf64e3fb77cc19bad146fbe26651985b117194",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f2c7ef3ba9556d62a7e2bb23b563c6510007d55c",
        "lessThan": "200a45649ab7361bc80c70aebf7165b64f9a6c9f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f2c7ef3ba9556d62a7e2bb23b563c6510007d55c",
        "lessThan": "bd0e8455b85b651a4c77de9616e307129b15aaa7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "f2c7ef3ba9556d62a7e2bb23b563c6510007d55c",
        "lessThan": "f5c7e8425f18fdb9bdb7d13340651d7876890329",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5.10.13",
        "lessThan": "5.10.38",
        "status": "affected",
        "versionType": "semver"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "arch/x86/kvm/vmx/nested.c"
    ],
    "versions": [
      {
        "version": "5.11",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.11",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.38",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.11.22",
        "lessThanOrEqual": "5.11.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.12.5",
        "lessThanOrEqual": "5.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.13",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/bd0e8455b85b651a4c77de9616e307129b15aaa7
git	www.git.kernel.org/stable/c/c8bf64e3fb77cc19bad146fbe26651985b117194
git	www.git.kernel.org/stable/c/200a45649ab7361bc80c70aebf7165b64f9a6c9f
git	www.git.kernel.org/stable/c/f5c7e8425f18fdb9bdb7d13340651d7876890329

23 May 2026 15:18Current

8.5High risk

Vulners AI Score8.5

EPSS0.00241