|
Vulnerabilities
< Back

CVE-2021-4093

Updated on 18 Feb 2022

Severity

8.8 High severity

Details

CVSS score
8.8
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE ID
Links
NISTCIRCLRHELUbuntu

Overview

About vulnerability

A flaw was found in the KVM’s AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES). A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction (for example, outs or ins) using the exit reason SVM_EXIT_IOIO. This issue results in a crash of the entire system or a potential guest-to-host escape scenario.

Details

Affected product:
AlmaLinux 9.2 ESU , CentOS 6 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , CloudLinux 6 ELS , CloudLinux 7 ELS , Oracle Linux 6 ELS , Ubuntu 16.04 ELS
Affected packages:
kernel @ 2.6.32 (+10 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
AlmaLinux 8 Released
7 kernels
  • 4.18.0-348.el8
  • 4.18.0-348.2.1.el8_5
  • 4.18.0-348.7.1.el8_5
  • 4.18.0-348.12.2.el8_5
  • 4.18.0-348.20.1.el8_5
  • 4.18.0-348.20.1.el8.fscrypt
  • 4.18.0-348.23.1.el8_5
CentOS 8 Released
3 kernels
  • 4.18.0-348.el8
  • 4.18.0-348.2.1.el8_5
  • 4.18.0-348.7.1.el8_5
CloudLinux OS 7h Released
8 kernels
  • 4.18.0-348.12.2.lve.1.el7h
  • 4.18.0-348.12.2.lve.2.el7h
  • 4.18.0-348.12.2.lve.el7h
  • 4.18.0-348.20.1.lve.1.el7h
  • 4.18.0-348.20.1.lve.el7h
  • 4.18.0-348.23.1.lve.el7h
  • 4.18.0-348.7.1.lve.el7h
  • 4.18.0-348.lve.el7h
CloudLinux OS 8 Released
6 kernels
  • 4.18.0-348.12.2.lve.el8
  • 4.18.0-348.20.1.lve.1.el8
  • 4.18.0-348.20.1.lve.el8
  • 4.18.0-348.23.1.lve.el8
  • 4.18.0-348.7.1.lve.el8
  • 4.18.0-348.lve.el8
RHEL 8 Released
6 kernels
  • 4.18.0-348.2.1.el8_5
  • 4.18.0-348.el8
  • 4.18.0-348.7.1.el8_5
  • 4.18.0-348.12.2.el8_5
  • 4.18.0-348.20.1.el8_5
  • 4.18.0-348.23.1.el8_5
Rocky Linux 8 Released
5 kernels
  • 4.18.0-348.2.1.el8_5
  • 4.18.0-348.12.2.el8_5
  • 4.18.0-348.7.1.el8_5
  • 4.18.0-348.20.1.el8_5
  • 4.18.0-348.23.1.el8_5
Ubuntu 20.04 AWS Hirsute Released
5 kernels
  • 5.11.0-1021.22~20.04.2
  • 5.11.0-1019.20~20.04.1
  • 5.11.0-1017.18~20.04.1
  • 5.11.0-1022.23~20.04.1
  • 5.11.0-1020.21~20.04.2
Ubuntu 20.04 HWE Hirsute Released
7 kernels
  • 5.11.0-36.40~20.04.1
  • 5.11.0-37.41~20.04.2
  • 5.11.0-25.27~20.04.1
  • 5.11.0-38.42~20.04.1
  • 5.11.0-34.36~20.04.1
  • 5.11.0-27.29~20.04.1
  • 5.11.0-40.44~20.04.2