Lucene search

K
ubuntuUbuntuUSN-5072-1
HistorySep 08, 2021 - 12:00 a.m.

Linux kernel vulnerabilities

2021-09-0800:00:00
ubuntu.com
96

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.8%

Releases

  • Ubuntu 20.04 LTS

Packages

  • linux-azure-5.8 - Linux kernel for Microsoft Azure cloud systems
  • linux-oem-5.10 - Linux kernel for OEM systems

Details

Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor
implementation for AMD processors in the Linux kernel allowed a guest VM to
disable restrictions on VMLOAD/VMSAVE in a nested guest. An attacker in a
guest VM could use this to read or write portions of the host’s physical
memory. (CVE-2021-3656)

Maxim Levitsky discovered that the KVM hypervisor implementation for AMD
processors in the Linux kernel did not properly prevent a guest VM from
enabling AVIC in nested guest VMs. An attacker in a guest VM could use this
to write to portions of the host’s physical memory. (CVE-2021-3653)