CVE-2021-3656

EUVD-2021-26951

04.03.2022, 19:15

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 21%

Affected Products (NVD)

Vendor	Product	Version
linux	linux_kernel	4.13 ≤ 𝑥 < 4.14.245
linux	linux_kernel	4.15 ≤ 𝑥 < 4.19.205
linux	linux_kernel	4.20 ≤ 𝑥 < 5.4.142
linux	linux_kernel	5.5 ≤ 𝑥 < 5.10.60
linux	linux_kernel	5.11 ≤ 𝑥 < 5.13.12
linux	linux_kernel	5.14
linux	linux_kernel	5.14:rc1
linux	linux_kernel	5.14:rc2
linux	linux_kernel	5.14:rc3
linux	linux_kernel	5.14:rc4
linux	linux_kernel	5.14:rc5
linux	linux_kernel	5.14:rc6
redhat	software_collections	-
redhat	enterprise_linux	8.0
redhat	enterprise_linux_desktop	7.0
redhat	enterprise_linux_eus	8.1
redhat	enterprise_linux_eus	8.2
redhat	enterprise_linux_eus	8.4
redhat	enterprise_linux_for_ibm_z_systems	7.0
redhat	enterprise_linux_for_ibm_z_systems	8.0
redhat	enterprise_linux_for_ibm_z_systems_eus	8.1
redhat	enterprise_linux_for_ibm_z_systems_eus	8.2
redhat	enterprise_linux_for_ibm_z_systems_eus	8.4
redhat	enterprise_linux_for_power_big_endian	7.0
redhat	enterprise_linux_for_power_little_endian	7.0
redhat	enterprise_linux_for_power_little_endian	8.0
redhat	enterprise_linux_for_power_little_endian_eus	8.1
redhat	enterprise_linux_for_power_little_endian_eus	8.2
redhat	enterprise_linux_for_power_little_endian_eus	8.4
redhat	enterprise_linux_for_real_time_for_nfv_tus	8.2
redhat	enterprise_linux_for_real_time_for_nfv_tus	8.4
redhat	enterprise_linux_for_real_time_tus	8.2
redhat	enterprise_linux_for_real_time_tus	8.4
redhat	enterprise_linux_for_scientific_computing	7.0
redhat	enterprise_linux_server	7.0
redhat	enterprise_linux_server_aus	7.6
redhat	enterprise_linux_server_aus	7.7
redhat	enterprise_linux_server_aus	8.2
redhat	enterprise_linux_server_aus	8.4
redhat	enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	7.6
redhat	enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	8.1
redhat	enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	8.2
redhat	enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	8.4
redhat	enterprise_linux_server_tus	7.6
redhat	enterprise_linux_server_tus	7.7
redhat	enterprise_linux_server_tus	8.2
redhat	enterprise_linux_server_tus	8.4
redhat	enterprise_linux_server_update_services_for_sap_solutions	7.6
redhat	enterprise_linux_server_update_services_for_sap_solutions	7.7
redhat	enterprise_linux_server_update_services_for_sap_solutions	8.1
redhat	enterprise_linux_server_update_services_for_sap_solutions	8.2
redhat	enterprise_linux_server_update_services_for_sap_solutions	8.4
redhat	enterprise_linux_workstation	7.0
redhat	3scale_api_management	2.0
redhat	codeready_linux_builder	-
redhat	virtualization_host	4.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
bullseye	5.10.223-1 fixed
bullseye (security)	5.10.226-1 fixed
sid	6.11.6-1 fixed
stretch	not-affected
trixie	6.11.5-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

bionic	Fixed 4.15.0-156.163 released
focal	Fixed 5.4.0-84.94 released
hirsute	Fixed 5.11.0-34.36 released
impish	not-affected
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	not-affected
xenial	not-affected

linux-allwinner

bionic	dne
focal	dne
jammy	dne
kinetic	not-affected
lunar	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-allwinner-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws

bionic	Fixed 4.15.0-1111.118 released
focal	Fixed 5.4.0-1056.59 released
hirsute	Fixed 5.11.0-1017.18 released
impish	not-affected
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	not-affected
xenial	not-affected

linux-aws-5.0

bionic	ignored
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-5.11

bionic	dne
focal	Fixed 5.11.0-1017.18~20.04.1 released
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-5.13

bionic	dne
focal	not-affected
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-5.15

bionic	dne
focal	not-affected
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-5.3

bionic	ignored
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-5.4

bionic	Fixed 5.4.0-1056.59~18.04.1 released
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-5.8

bionic	dne
focal	ignored
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-6.2

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-fips

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-aws-hwe

bionic	dne
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	Fixed 4.15.0-1111.118~16.04.1 released

linux-azure

bionic	ignored
focal	Fixed 5.4.0-1058.60 released
hirsute	Fixed 5.11.0-1015.16 released
impish	not-affected
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	Fixed 4.15.0-1123.136~14.04.1 released
xenial	Fixed 4.15.0-1123.136~16.04.1 released

linux-azure-4.15

bionic	Fixed 4.15.0-1123.136 released
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-5.11

bionic	dne
focal	Fixed 5.11.0-1015.16~20.04.1 released
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-5.13

bionic	dne
focal	not-affected
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-5.15

bionic	dne
focal	not-affected
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-5.3

bionic	ignored
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-5.4

bionic	Fixed 5.4.0-1058.60~18.04.1 released
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-5.8

bionic	dne
focal	Fixed 5.8.0-1041.44~20.04.1 released
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-6.2

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-edge

bionic	ignored
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-fde

bionic	dne
focal	Fixed 5.4.0-1058.60 released
impish	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-fde-5.15

bionic	dne
focal	not-affected
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-fde-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-fde-6.2

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-azure-fips

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-bluefield

bionic	dne
focal	Fixed 5.4.0-1019.22 released
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-dell300x

bionic	Fixed 4.15.0-1027.32 released
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-fips

bionic	dne
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	ignored

linux-gcp

bionic	ignored
focal	Fixed 5.4.0-1052.56 released
hirsute	Fixed 5.11.0-1018.20 released
impish	not-affected
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	dne
xenial	Fixed 4.15.0-1108.122~16.04.1 released

linux-gcp-4.15

bionic	Fixed 4.15.0-1108.122 released
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-5.11

bionic	dne
focal	Fixed 5.11.0-1018.20~20.04.2 released
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-5.13

bionic	dne
focal	not-affected
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-5.15

bionic	dne
focal	not-affected
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-5.3

bionic	ignored
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-5.4

bionic	Fixed 5.4.0-1052.56~18.04.1 released
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-5.8

bionic	dne
focal	ignored
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-6.2

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-edge

bionic	ignored
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gcp-fips

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gke

bionic	dne
focal	Fixed 5.4.0-1052.55 released
hirsute	dne
impish	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	not-affected
trusty	dne
xenial	ignored

linux-gke-4.15

bionic	ignored
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gke-5.0

bionic	ignored
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gke-5.15

bionic	dne
focal	not-affected
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gke-5.3

bionic	ignored
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gke-5.4

bionic	Fixed 5.4.0-1052.55~18.04.1 released
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gkeop

bionic	dne
focal	Fixed 5.4.0-1023.24 released
hirsute	dne
impish	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gkeop-5.15

bionic	dne
focal	not-affected
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-gkeop-5.4

bionic	Fixed 5.4.0-1023.24~18.04.1 released
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-hwe

bionic	ignored
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	Fixed 4.15.0-156.163~16.04.1 released

linux-hwe-5.11

bionic	dne
focal	Fixed 5.11.0-34.36~20.04.1 released
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-hwe-5.13

bionic	dne
focal	not-affected
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-hwe-5.15

bionic	dne
focal	not-affected
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-hwe-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-hwe-5.4

bionic	Fixed 5.4.0-84.94~18.04.1 released
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-hwe-5.8

bionic	dne
focal	ignored
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-hwe-6.2

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-hwe-6.5

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-hwe-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-hwe-edge

bionic	ignored
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	ignored

linux-ibm

bionic	dne
focal	Fixed 5.4.0-1004.5 released
hirsute	dne
impish	dne
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	dne
xenial	dne

linux-ibm-5.15

bionic	dne
focal	not-affected
jammy	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-ibm-5.4

bionic	not-affected
focal	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-intel

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	not-affected
trusty	dne
xenial	dne

linux-intel-5.13

bionic	dne
focal	not-affected
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-intel-iot-realtime

bionic	dne
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-intel-iotg

bionic	dne
focal	dne
impish	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-intel-iotg-5.15

bionic	dne
focal	not-affected
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-iot

bionic	dne
focal	not-affected
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-kvm

bionic	Fixed 4.15.0-1099.101 released
focal	Fixed 5.4.0-1046.48 released
hirsute	Fixed 5.11.0-1015.16 released
impish	not-affected
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	not-affected

linux-laptop

bionic	dne
focal	dne
jammy	dne
lunar	dne
mantic	not-affected
noble	dne
trusty	dne
xenial	dne

linux-lowlatency

bionic	dne
focal	dne
impish	dne
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	dne
xenial	dne

linux-lowlatency-hwe-5.15

bionic	dne
focal	not-affected
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-lowlatency-hwe-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-lowlatency-hwe-6.2

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-lowlatency-hwe-6.5

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-lowlatency-hwe-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-lts-xenial

bionic	dne
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	not-affected
xenial	dne

linux-nvidia

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	not-affected
trusty	dne
xenial	dne

linux-nvidia-6.2

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-nvidia-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-nvidia-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-nvidia-lowlatency

bionic	dne
focal	dne
jammy	dne
noble	not-affected
trusty	dne
xenial	dne

linux-oem

bionic	ignored
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	ignored

linux-oem-5.10

bionic	dne
focal	Fixed 5.10.0-1045.47 released
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oem-5.13

bionic	dne
focal	Fixed 5.13.0-1012.16 released
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oem-5.14

bionic	dne
focal	not-affected
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oem-5.17

bionic	dne
focal	dne
impish	dne
jammy	not-affected
kinetic	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oem-5.6

bionic	dne
focal	ignored
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oem-6.0

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oem-6.1

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oem-6.5

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oem-6.8

bionic	dne
focal	dne
jammy	dne
mantic	dne
noble	not-affected
trusty	dne
xenial	dne

linux-oem-osp1

bionic	ignored
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oracle

bionic	Fixed 4.15.0-1080.88 released
focal	Fixed 5.4.0-1054.58 released
hirsute	Fixed 5.11.0-1017.18 released
impish	not-affected
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	dne
xenial	Fixed 4.15.0-1080.88~16.04.1 released

linux-oracle-5.0

bionic	ignored
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oracle-5.11

bionic	dne
focal	Fixed 5.11.0-1017.18~20.04.1 released
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oracle-5.13

bionic	dne
focal	not-affected
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oracle-5.15

bionic	dne
focal	not-affected
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oracle-5.3

bionic	ignored
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oracle-5.4

bionic	Fixed 5.4.0-1054.58~18.04.1 released
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oracle-5.8

bionic	dne
focal	ignored
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-oracle-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-raspi

bionic	dne
focal	not-affected
hirsute	Fixed 5.11.0-1017.18 released
impish	not-affected
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	dne
xenial	dne

linux-raspi-5.4

bionic	not-affected
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-raspi-realtime

bionic	dne
focal	dne
jammy	dne
noble	dne
trusty	dne
xenial	dne

linux-raspi2

bionic	not-affected
focal	not-affected
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	not-affected

linux-raspi2-5.3

bionic	not-affected
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-realtime

bionic	dne
focal	dne
jammy	ignored
noble	dne
trusty	dne
xenial	dne

linux-riscv

bionic	dne
focal	not-affected
hirsute	Fixed 5.11.0-1018.19 released
impish	not-affected
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	dne
xenial	dne

linux-riscv-5.11

bionic	dne
focal	Fixed 5.11.0-1018.19~20.04.2 released
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-riscv-5.15

bionic	dne
focal	not-affected
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-riscv-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-riscv-5.8

bionic	dne
focal	not-affected
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-riscv-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-riscv-6.8

bionic	dne
focal	dne
jammy	not-affected
noble	dne
trusty	dne
xenial	dne

linux-snapdragon

bionic	Fixed 4.15.0-1112.121 released
focal	dne
hirsute	dne
impish	dne
jammy	dne
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	not-affected

linux-starfive

bionic	dne
focal	dne
jammy	dne
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	dne
trusty	dne
xenial	dne

linux-starfive-5.19

bionic	dne
focal	dne
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-starfive-6.2

bionic	dne
focal	dne
jammy	not-affected
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-starfive-6.5

bionic	dne
focal	dne
jammy	not-affected
mantic	dne
noble	dne
trusty	dne
xenial	dne

linux-xilinx-zynqmp

bionic	dne
focal	not-affected
jammy	not-affected
kinetic	dne
lunar	dne
mantic	dne
noble	dne
trusty	dne
xenial	dne

Common Weakness Enumeration

CWE-862 - Missing Authorization
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.

References

https://bugzilla.redhat.com/show_bug.cgi?id=1983988

https://git.kernel.org/pub/scm/virt/kvm/kvm.git/commit/?id=c7dfa4009965a9b2d7b329ee970eb8da0d32f0bc

https://github.com/torvalds/linux/commit/c7dfa4009965a9b2d7b329ee970eb8da0d32f0bc

https://www.openwall.com/lists/oss-security/2021/08/16/1

https://bugzilla.redhat.com/show_bug.cgi?id=1983988

https://git.kernel.org/pub/scm/virt/kvm/kvm.git/commit/?id=c7dfa4009965a9b2d7b329ee970eb8da0d32f0bc

https://github.com/torvalds/linux/commit/c7dfa4009965a9b2d7b329ee970eb8da0d32f0bc

https://www.openwall.com/lists/oss-security/2021/08/16/1