CVE-2021-3656

04.03.2022, 19:15

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	8.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
redhat	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 15%

Vendor	Product	Version
linux	linux_kernel	4.13 ≤ 𝑥 < 4.14.245
linux	linux_kernel	4.15 ≤ 𝑥 < 4.19.205
linux	linux_kernel	4.20 ≤ 𝑥 < 5.4.142
linux	linux_kernel	5.5 ≤ 𝑥 < 5.10.60
linux	linux_kernel	5.11 ≤ 𝑥 < 5.13.12
linux	linux_kernel	5.14
linux	linux_kernel	5.14:rc1
linux	linux_kernel	5.14:rc2
linux	linux_kernel	5.14:rc3
linux	linux_kernel	5.14:rc4
linux	linux_kernel	5.14:rc5
linux	linux_kernel	5.14:rc6
redhat	software_collections	-
redhat	enterprise_linux	8.0
redhat	enterprise_linux_desktop	7.0
redhat	enterprise_linux_eus	8.1
redhat	enterprise_linux_eus	8.2
redhat	enterprise_linux_eus	8.4
redhat	enterprise_linux_for_ibm_z_systems	7.0
redhat	enterprise_linux_for_ibm_z_systems	8.0
redhat	enterprise_linux_for_ibm_z_systems_eus	8.1
redhat	enterprise_linux_for_ibm_z_systems_eus	8.2
redhat	enterprise_linux_for_ibm_z_systems_eus	8.4
redhat	enterprise_linux_for_power_big_endian	7.0
redhat	enterprise_linux_for_power_little_endian	7.0
redhat	enterprise_linux_for_power_little_endian	8.0
redhat	enterprise_linux_for_power_little_endian_eus	8.1
redhat	enterprise_linux_for_power_little_endian_eus	8.2
redhat	enterprise_linux_for_power_little_endian_eus	8.4
redhat	enterprise_linux_for_real_time_for_nfv_tus	8.2
redhat	enterprise_linux_for_real_time_for_nfv_tus	8.4
redhat	enterprise_linux_for_real_time_tus	8.2
redhat	enterprise_linux_for_real_time_tus	8.4
redhat	enterprise_linux_for_scientific_computing	7.0
redhat	enterprise_linux_server	7.0
redhat	enterprise_linux_server_aus	7.6
redhat	enterprise_linux_server_aus	7.7
redhat	enterprise_linux_server_aus	8.2
redhat	enterprise_linux_server_aus	8.4
redhat	enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	7.6
redhat	enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	8.1
redhat	enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	8.2
redhat	enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions	8.4
redhat	enterprise_linux_server_tus	7.6
redhat	enterprise_linux_server_tus	7.7
redhat	enterprise_linux_server_tus	8.2
redhat	enterprise_linux_server_tus	8.4
redhat	enterprise_linux_server_update_services_for_sap_solutions	7.6
redhat	enterprise_linux_server_update_services_for_sap_solutions	7.7
redhat	enterprise_linux_server_update_services_for_sap_solutions	8.1
redhat	enterprise_linux_server_update_services_for_sap_solutions	8.2
redhat	enterprise_linux_server_update_services_for_sap_solutions	8.4
redhat	enterprise_linux_workstation	7.0
redhat	3scale_api_management	2.0
redhat	codeready_linux_builder	-
redhat	virtualization_host	4.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
stretch	not-affected
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
trixie	6.11.5-1 fixed
sid	6.11.6-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

noble	not-affected
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	not-affected
impish	not-affected
hirsute	Fixed 5.11.0-34.36 released
focal	Fixed 5.4.0-84.94 released
bionic	Fixed 4.15.0-156.163 released
xenial	not-affected
trusty	not-affected

linux-allwinner

noble	dne
mantic	dne
lunar	not-affected
kinetic	not-affected
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-allwinner-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws

noble	not-affected
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	not-affected
impish	not-affected
hirsute	Fixed 5.11.0-1017.18 released
focal	Fixed 5.4.0-1056.59 released
bionic	Fixed 4.15.0-1111.118 released
xenial	not-affected
trusty	not-affected

linux-aws-5.0

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-aws-5.11

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	Fixed 5.11.0-1017.18~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.13

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.3

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-aws-5.4

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	Fixed 5.4.0-1056.59~18.04.1 released
xenial	dne
trusty	dne

linux-aws-5.8

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-aws-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-fips

noble	dne
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-hwe

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	dne
xenial	Fixed 4.15.0-1111.118~16.04.1 released
trusty	dne

linux-azure

noble	not-affected
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	not-affected
impish	not-affected
hirsute	Fixed 5.11.0-1015.16 released
focal	Fixed 5.4.0-1058.60 released
bionic	ignored
xenial	Fixed 4.15.0-1123.136~16.04.1 released
trusty	Fixed 4.15.0-1123.136~14.04.1 released

linux-azure-4.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	Fixed 4.15.0-1123.136 released
xenial	dne
trusty	dne

linux-azure-5.11

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	Fixed 5.11.0-1015.16~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.13

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.3

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-azure-5.4

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	Fixed 5.4.0-1058.60~18.04.1 released
xenial	dne
trusty	dne

linux-azure-5.8

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	Fixed 5.8.0-1041.44~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-azure-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-edge

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-azure-fde

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
impish	dne
focal	Fixed 5.4.0-1058.60 released
bionic	dne
xenial	dne
trusty	dne

linux-azure-fde-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-azure-fde-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-fde-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-fips

noble	dne
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-bluefield

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	Fixed 5.4.0-1019.22 released
bionic	dne
xenial	dne
trusty	dne

linux-dell300x

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	Fixed 4.15.0-1027.32 released
xenial	dne
trusty	dne

linux-fips

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	dne
xenial	ignored
trusty	dne

linux-gcp

noble	not-affected
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	not-affected
impish	not-affected
hirsute	Fixed 5.11.0-1018.20 released
focal	Fixed 5.4.0-1052.56 released
bionic	ignored
xenial	Fixed 4.15.0-1108.122~16.04.1 released
trusty	dne

linux-gcp-4.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	Fixed 4.15.0-1108.122 released
xenial	dne
trusty	dne

linux-gcp-5.11

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	Fixed 5.11.0-1018.20~20.04.2 released
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.13

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.3

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gcp-5.4

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	Fixed 5.4.0-1052.56~18.04.1 released
xenial	dne
trusty	dne

linux-gcp-5.8

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gcp-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-edge

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gcp-fips

noble	dne
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gke

noble	not-affected
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
impish	dne
hirsute	dne
focal	Fixed 5.4.0-1052.55 released
bionic	dne
xenial	ignored
trusty	dne

linux-gke-4.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gke-5.0

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gke-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-gke-5.3

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gke-5.4

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	Fixed 5.4.0-1052.55~18.04.1 released
xenial	dne
trusty	dne

linux-gkeop

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
impish	dne
hirsute	dne
focal	Fixed 5.4.0-1023.24 released
bionic	dne
xenial	dne
trusty	dne

linux-gkeop-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-gkeop-5.4

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	Fixed 5.4.0-1023.24~18.04.1 released
xenial	dne
trusty	dne

linux-hwe

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	ignored
xenial	Fixed 4.15.0-156.163~16.04.1 released
trusty	dne

linux-hwe-5.11

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	Fixed 5.11.0-34.36~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.13

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.4

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	Fixed 5.4.0-84.94~18.04.1 released
xenial	dne
trusty	dne

linux-hwe-5.8

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.5

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-edge

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	ignored
xenial	ignored
trusty	dne

linux-ibm

noble	not-affected
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	not-affected
impish	dne
hirsute	dne
focal	Fixed 5.4.0-1004.5 released
bionic	dne
xenial	dne
trusty	dne

linux-ibm-5.15

noble	dne
mantic	dne
lunar	dne
jammy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-ibm-5.4

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-intel

noble	not-affected
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-intel-5.13

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-intel-iot-realtime

noble	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-intel-iotg

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
impish	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-intel-iotg-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-iot

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-kvm

noble	dne
mantic	dne
lunar	not-affected
kinetic	not-affected
jammy	not-affected
impish	not-affected
hirsute	Fixed 5.11.0-1015.16 released
focal	Fixed 5.4.0-1046.48 released
bionic	Fixed 4.15.0-1099.101 released
xenial	not-affected
trusty	dne

linux-laptop

noble	dne
mantic	not-affected
lunar	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency

noble	not-affected
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	not-affected
impish	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.5

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lts-xenial

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	dne
xenial	dne
trusty	not-affected

linux-nvidia

noble	not-affected
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-lowlatency

noble	not-affected
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	ignored
xenial	ignored
trusty	dne

linux-oem-5.10

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	Fixed 5.10.0-1045.47 released
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.13

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	Fixed 5.13.0-1012.16 released
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.14

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.17

noble	dne
mantic	dne
lunar	dne
kinetic	not-affected
jammy	not-affected
impish	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.6

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.0

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.1

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.5

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.8

noble	not-affected
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-osp1

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle

noble	not-affected
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	not-affected
impish	not-affected
hirsute	Fixed 5.11.0-1017.18 released
focal	Fixed 5.4.0-1054.58 released
bionic	Fixed 4.15.0-1080.88 released
xenial	Fixed 4.15.0-1080.88~16.04.1 released
trusty	dne

linux-oracle-5.0

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle-5.11

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	Fixed 5.11.0-1017.18~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-oracle-5.13

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-oracle-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-oracle-5.3

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle-5.4

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	Fixed 5.4.0-1054.58~18.04.1 released
xenial	dne
trusty	dne

linux-oracle-5.8

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oracle-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-raspi

noble	not-affected
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	not-affected
impish	not-affected
hirsute	Fixed 5.11.0-1017.18 released
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-raspi-5.4

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-raspi-realtime

noble	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-raspi2

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	not-affected
bionic	not-affected
xenial	not-affected
trusty	dne

linux-raspi2-5.3

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-realtime

noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-riscv

noble	not-affected
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	not-affected
impish	not-affected
hirsute	Fixed 5.11.0-1018.19 released
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.11

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	Fixed 5.11.0-1018.19~20.04.2 released
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.8

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-riscv-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-riscv-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-snapdragon

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
impish	dne
hirsute	dne
focal	dne
bionic	Fixed 4.15.0-1112.121 released
xenial	not-affected
trusty	dne

linux-starfive

noble	dne
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-starfive-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-starfive-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-starfive-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-xilinx-zynqmp

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

Common Weakness Enumeration

CWE-862 - Missing Authorization
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.

References

https://bugzilla.redhat.com/show_bug.cgi?id=1983988

https://git.kernel.org/pub/scm/virt/kvm/kvm.git/commit/?id=c7dfa4009965a9b2d7b329ee970eb8da0d32f0bc

https://github.com/torvalds/linux/commit/c7dfa4009965a9b2d7b329ee970eb8da0d32f0bc

https://www.openwall.com/lists/oss-security/2021/08/16/1

https://bugzilla.redhat.com/show_bug.cgi?id=1983988

https://git.kernel.org/pub/scm/virt/kvm/kvm.git/commit/?id=c7dfa4009965a9b2d7b329ee970eb8da0d32f0bc

https://github.com/torvalds/linux/commit/c7dfa4009965a9b2d7b329ee970eb8da0d32f0bc

https://www.openwall.com/lists/oss-security/2021/08/16/1