Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor
implementation for AMD processors in the Linux kernel allowed a guest VM to
disable restrictions on VMLOAD/VMSAVE in a nested guest. An attacker in a
guest VM could use this to read or write portions of the host’s physical
memory. (CVE-2021-3656)
Maxim Levitsky discovered that the KVM hypervisor implementation for AMD
processors in the Linux kernel did not properly prevent a guest VM from
enabling AVIC in nested guest VMs. An attacker in a guest VM could use this
to write to portions of the host’s physical memory. (CVE-2021-3653)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 20.04 | noarch | linux-image-oem-20.04b | < 5.10.0.1045.47 | UNKNOWN |
Ubuntu | 20.04 | noarch | linux-headers-oem-20.04 | < 5.10.0.1045.47 | UNKNOWN |
Ubuntu | 20.04 | noarch | linux-headers-oem-20.04-edge | < 5.10.0.1045.47 | UNKNOWN |
Ubuntu | 20.04 | noarch | linux-headers-oem-20.04b | < 5.10.0.1045.47 | UNKNOWN |
Ubuntu | 20.04 | noarch | linux-image-oem-20.04 | < 5.10.0.1045.47 | UNKNOWN |
Ubuntu | 20.04 | noarch | linux-image-oem-20.04-edge | < 5.10.0.1045.47 | UNKNOWN |
Ubuntu | 20.04 | noarch | linux-oem-20.04 | < 5.10.0.1045.47 | UNKNOWN |
Ubuntu | 20.04 | noarch | linux-oem-20.04-edge | < 5.10.0.1045.47 | UNKNOWN |
Ubuntu | 20.04 | noarch | linux-oem-20.04b | < 5.10.0.1045.47 | UNKNOWN |
Ubuntu | 20.04 | noarch | linux-tools-oem-20.04 | < 5.10.0.1045.47 | UNKNOWN |