Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000232)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000232 advisory. A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister MSR access with nested=1 virtualization enabled. In that, L1 guest could access...

CVE-2021-47255

In the Linux kernel, the following vulnerability has been resolved: kvm: LAPIC: Restore guard to prevent illegal APIC register access Per the SDM, "any access that touches bytes 4 through 15 of an APIC register may cause undefined behavior and must not be executed." Worse, such an access in...

CVE-2021-47255

In the Linux kernel, the following vulnerability has been resolved: kvm: LAPIC: Restore guard to prevent illegal APIC register access Per the SDM, "any access that touches bytes 4 through 15 of an APIC register may cause undefined behavior and must not be executed." Worse, such an access in...

DEBIAN-CVE-2021-47255

In the Linux kernel, the following vulnerability has been resolved: kvm: LAPIC: Restore guard to prevent illegal APIC register access Per the SDM, "any access that touches bytes 4 through 15 of an APIC register may cause undefined behavior and must not be executed." Worse, such an access in...

CVE-2021-47255

In the Linux kernel, the following vulnerability has been resolved: kvm: LAPIC: Restore guard to prevent illegal APIC register access Per the SDM, "any access that touches bytes 4 through 15 of an APIC register may cause undefined behavior and must not be executed." Worse, such an access in...

PT-2021-29438

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.46 Description The issue concerns the KVM LAPIC, where a guard was not properly restored, potentially allowing illegal APIC register access. The actual impact and attack plausibility have not yet been prove...

PT-2021-29378

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.128 Description The issue concerns the KVM LAPIC, where a guard was not properly restored, potentially allowing illegal APIC register access. The actual impact and attack plausibility have not yet been prove...

PT-2021-25384

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.128 Description: The issue concerns the KVM LAPIC, where a guard was not properly restored, potentially allowing illegal APIC register access. The actual impact and attack plausibility have not yet been...

PT-2021-25444

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.46 Description: The issue concerns illegal APIC register access in the LAPIC component of the KVM. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2024-11262

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, where an access to bytes 4 through 15 of an APIC register may cause undefined behavior. This access in kvm lapic reg read can result in a leak o...

Kernel: KVM: nVMX: guest accesses L0 MSR causes potential DoS

A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Register MSR access with nested=1 virtualization enabled. In that, L1 guest could access L0's APIC register values via L2 guest, when 'virtualize x2APIC mode' is enabled. A guest could use this flaw to potentially crash th...

Linux Kernel (x86) - Memory Sinkhole Privilege Escalation

; memory sinkhole proof of concept ; hijack ring -2 execution through the apic overlay attack. ; deployed in ring 0 ; the SMBASE register of the core under attack TARGETSMBASE equ 0x1f5ef800 ; the location of the attack GDT. ; this is determined by which register will be read out of the APIC ; fo...