Lucene search
HistoryMar 04, 2022 - 7:15 p.m.
CVE-2021-3656
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
8.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
A flaw was found in the KVM’s AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the “virt_ext” field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape.
Affected configurations
Node
linuxlinux_kernelRange4.13–4.14.245
ORlinuxlinux_kernelRange4.15–4.19.205
ORlinuxlinux_kernelRange4.20–5.4.142
ORlinuxlinux_kernelRange5.5–5.10.60
ORlinuxlinux_kernelRange5.11–5.13.12
ORlinuxlinux_kernelMatch5.14-
ORlinuxlinux_kernelMatch5.14rc1
ORlinuxlinux_kernelMatch5.14rc2
ORlinuxlinux_kernelMatch5.14rc3
ORlinuxlinux_kernelMatch5.14rc4
ORlinuxlinux_kernelMatch5.14rc5
ORlinuxlinux_kernelMatch5.14rc6
Node
fedoraprojectfedoraMatch33
ORfedoraprojectfedoraMatch34
Node
redhatenterprise_linux_serverMatch7.0
redhatsoftware_collectionsMatch-
Node
redhatopenstackMatch13
ORredhatenterprise_linuxMatch8.0
ORredhatenterprise_linux_desktopMatch7.0
ORredhatenterprise_linux_eusMatch8.1
ORredhatenterprise_linux_eusMatch8.2
ORredhatenterprise_linux_eusMatch8.4
ORredhatenterprise_linux_for_ibm_z_systemsMatch7.0
ORredhatenterprise_linux_for_ibm_z_systemsMatch8.0
ORredhatenterprise_linux_for_ibm_z_systems_eusMatch8.1
ORredhatenterprise_linux_for_ibm_z_systems_eusMatch8.2
ORredhatenterprise_linux_for_ibm_z_systems_eusMatch8.4
ORredhatenterprise_linux_for_power_big_endianMatch7.0
ORredhatenterprise_linux_for_power_little_endianMatch7.0
ORredhatenterprise_linux_for_power_little_endianMatch8.0
ORredhatenterprise_linux_for_power_little_endian_eusMatch8.1
ORredhatenterprise_linux_for_power_little_endian_eusMatch8.2
ORredhatenterprise_linux_for_power_little_endian_eusMatch8.4
ORredhatenterprise_linux_for_real_timeMatch7
ORredhatenterprise_linux_for_real_timeMatch8
ORredhatenterprise_linux_for_real_time_for_nfvMatch7
ORredhatenterprise_linux_for_real_time_for_nfvMatch8
ORredhatenterprise_linux_for_real_time_for_nfv_tusMatch8.2
ORredhatenterprise_linux_for_real_time_for_nfv_tusMatch8.4
ORredhatenterprise_linux_for_real_time_tusMatch8.2
ORredhatenterprise_linux_for_real_time_tusMatch8.4
ORredhatenterprise_linux_for_scientific_computingMatch7.0
ORredhatenterprise_linux_serverMatch7.0
ORredhatenterprise_linux_server_ausMatch7.6
ORredhatenterprise_linux_server_ausMatch7.7
ORredhatenterprise_linux_server_ausMatch8.2
ORredhatenterprise_linux_server_ausMatch8.4
ORredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch7.6
ORredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.1
ORredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.2
ORredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsMatch8.4
ORredhatenterprise_linux_server_tusMatch7.6
ORredhatenterprise_linux_server_tusMatch7.7
ORredhatenterprise_linux_server_tusMatch8.2
ORredhatenterprise_linux_server_tusMatch8.4
ORredhatenterprise_linux_server_update_services_for_sap_solutionsMatch7.6
ORredhatenterprise_linux_server_update_services_for_sap_solutionsMatch7.7
ORredhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.1
ORredhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.2
ORredhatenterprise_linux_server_update_services_for_sap_solutionsMatch8.4
ORredhatenterprise_linux_workstationMatch7.0
Node
redhatenterprise_linuxMatch7.0
ORredhatenterprise_linuxMatch8.0
redhat3scale_api_managementMatch2.0
Node
redhatenterprise_linuxMatch8.0
ORredhatenterprise_linux_eusMatch8.1
ORredhatenterprise_linux_eusMatch8.2
ORredhatenterprise_linux_eusMatch8.4
ORredhatenterprise_linux_for_power_little_endianMatch8.0
ORredhatenterprise_linux_for_power_little_endian_eusMatch8.1
ORredhatenterprise_linux_for_power_little_endian_eusMatch8.2
ORredhatenterprise_linux_for_power_little_endian_eusMatch8.4
redhatcodeready_linux_builderMatch-
Node
redhatenterprise_linuxMatch7.0
ORredhatenterprise_linuxMatch8.0
redhatvirtualization_hostMatch4.0
Related
veracode
veracode
Denial Of Service (DoS)
2021-09-11 17:29:29
f5
f5
K80212034 : Linux kernel vulnerability CVE-2021-3656
2022-01-20 00:00:00
redhatcve
redhatcve
CVE-2021-3656
2021-08-16 14:54:06
debiancve
debiancve
CVE-2021-3656
2022-03-04 19:15:08
ubuntucve
ubuntucve
CVE-2021-3656
2021-08-16 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-3656 affecting package kernel 5.10.161.1-1
2022-03-10 23:47:45
osv
osv
CVE-2021-3656
2022-03-04 19:15:08
linux-azure-5.8, linux-oem-5.10 vulnerabilities
2021-09-08 23:48:20
Important: kernel security, bug fix, and enhancement update
2021-11-02 07:47:41
cvelist
cvelist
CVE-2021-3656
2022-03-04 18:41:26
prion
prion
Input validation
2022-03-04 19:15:00
cve
cve
CVE-2021-3656
2022-03-04 19:15:08
fedora
fedora
[SECURITY] Fedora 33 Update: kernel-5.13.12-100.fc33
2021-08-21 01:20:26
[SECURITY] Fedora 34 Update: kernel-5.13.12-200.fc34
2021-08-21 01:08:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel-container security update
2021-08-16 00:00:00
Unbreakable Enterprise kernel-container security update
2021-08-16 00:00:00
Unbreakable Enterprise kernel security update
2021-08-16 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2021-09-08 00:00:00
Linux kernel (OEM) vulnerabilities
2021-09-16 00:00:00
Kernel Live Patch Security Notice
2021-09-13 00:00:00
nessus
nessus
Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9419)
2021-08-16 00:00:00
Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2021-9422)
2021-08-16 00:00:00
redhat
redhat
(RHSA-2021:3904) Moderate: kernel security and bug fix update
2021-10-19 06:26:34
(RHSA-2021:3676) Moderate: kernel security, bug fix, and enhancement update
2021-09-28 13:53:01
(RHSA-2021:3909) Moderate: kernel-rt security and bug fix update
2021-10-19 06:33:11
openvas
openvas
Fedora: Security Advisory for kernel (FEDORA-2021-33819e6b09)
2021-08-23 00:00:00
Ubuntu: Security Advisory (USN-5072-1)
2021-09-09 00:00:00
Fedora: Security Advisory for kernel (FEDORA-2021-a424256622)
2021-08-23 00:00:00
rocky
rocky
kernel-rt security and bug fix update
2021-11-02 09:33:51
kernel security, bug fix, and enhancement update
2021-11-02 07:47:41
almalinux
almalinux
Important: kernel security, bug fix, and enhancement update
2021-11-02 07:47:41
ibm
ibm
mageia
mageia
Updated kernel-linus packages fix security vulnerabilities
2021-08-23 08:28:48
Updated kernel packages fix security vulnerabilities
2021-08-23 08:28:48
centos
centos
bpftool, kernel, perf, python security update
2021-11-17 15:22:13
redos
redos
ROS-20220207-01
2022-02-07 00:00:00
cloudfoundry
cloudfoundry
USN-5071-2: Linux kernel (HWE) vulnerabilities | Cloud Foundry
2021-10-04 00:00:00
amazon
amazon
Medium: kernel
2021-09-08 23:35:00
debian
debian
[SECURITY] [DSA 4978-1] linux security update
2021-09-25 08:09:05
[SECURITY] [DSA 4978-1] linux security update
2021-09-25 08:09:05
[SECURITY] [DLA 2785-1] linux-4.19 security update
2021-10-15 21:50:44
photon
photon
Important Photon OS Security Update - PHSA-2021-3.0-0302
2021-09-19 00:00:00
Important Photon OS Security Update - PHSA-2021-4.0-0095
2021-09-04 00:00:00
suse
suse
Security update for the Linux Kernel (important)
2021-09-15 00:00:00
Security update for the Linux Kernel (important)
2021-09-21 00:00:00
Security update for the Linux Kernel (important)
2021-09-23 00:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
8.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2021-3656