Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-46978

Опубликовано: 28 фев. 2024
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.8

Описание

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always make an attempt to map eVMCS after migration When enlightened VMCS is in use and nested state is migrated with vmx_get_nested_state()/vmx_set_nested_state() KVM can't map evmcs page right away: evmcs gpa is not 'struct kvm_vmx_nested_state_hdr' and we can't read it from VP assist page because userspace may decide to restore HV_X64_MSR_VP_ASSIST_PAGE after restoring nested state (and QEMU, for example, does exactly that). To make sure eVMCS is mapped /vmx_set_nested_state() raises KVM_REQ_GET_NESTED_STATE_PAGES request. Commit f2c7ef3ba955 ("KVM: nSVM: cancel KVM_REQ_GET_NESTED_STATE_PAGES on nested vmexit") added KVM_REQ_GET_NESTED_STATE_PAGES clearing to nested_vmx_vmexit() to make sure MSR permission bitmap is not switched when an immediate exit from L2 to L1 happens right after migration (caused by a pending event, for example). Unfortunately, in the exact same situation we still need to have eV...

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

6.8.0-31.31
esm-infra-legacy/trusty

not-affected

3.11.0-12.19
esm-infra/bionic

not-affected

4.13.0-16.19
esm-infra/focal

not-affected

5.4.0-9.12
esm-infra/xenial

not-affected

4.4.0-2.16
focal

not-affected

5.4.0-9.12
jammy

not-affected

5.13.0-19.19
mantic

not-affected

6.2.0-20.20
noble

not-affected

6.5.0-9.9

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

end of kernel support
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

end of life
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

6.8.0-1008.8
esm-infra-legacy/trusty

not-affected

4.4.0-1002.2
esm-infra/bionic

not-affected

4.15.0-1001.1
esm-infra/focal

not-affected

5.4.0-1005.5
esm-infra/xenial

not-affected

4.4.0-1001.10
focal

not-affected

5.4.0-1005.5
jammy

not-affected

5.13.0-1005.6
mantic

not-affected

6.2.0-1003.3
noble

not-affected

6.5.0-1008.8

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

ignored

superseded by linux-aws-5.3
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-aws-5.3

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-aws-5.13
focal

ignored

end of standard support, was ignored [superseded by linux-aws-5.13]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-aws-5.13
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-aws-5.15
focal

ignored

end of standard support, was ignored [superseded by linux-aws-5.15]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-aws-5.15
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

5.15.0-1014.18~20.04.1
focal

not-affected

5.15.0-1014.18~20.04.1
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-aws-6.2
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-aws-6.2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

ignored

superseded by linux-aws-5.4
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-aws-5.4

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

not-affected

5.4.0-1018.18~18.04.1
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-aws-5.11
focal

ignored

end of standard support, was ignored [superseded by linux-aws-5.11]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-aws-5.11
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-aws-6.5
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-aws-6.5
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

not-affected

6.5.0-1008.8~22.04.1
mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

fips-updates/bionic

not-affected

4.15.0-2000.4
fips-updates/focal

not-affected

5.4.0-1021.21+fips2
fips/bionic

not-affected

4.15.0-2000.4
fips/focal

not-affected

5.4.0-1021.21+fips2

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

esm-infra/xenial

not-affected

4.15.0-1030.31~16.04.1
focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

6.8.0-1007.7
esm-infra-legacy/trusty

not-affected

4.15.0-1023.24~14.04.1
esm-infra/bionic

ignored

superseded by linux-azure-5.3
esm-infra/focal

not-affected

5.4.0-1006.6
esm-infra/xenial

not-affected

4.11.0-1009.9
focal

not-affected

5.4.0-1006.6
jammy

not-affected

5.13.0-1006.7
mantic

not-affected

6.2.0-1003.3
noble

not-affected

6.5.0-1007.7

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

not-affected

4.15.0-1082.92
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-azure-5.13
focal

ignored

end of standard support, was ignored [superseded by linux-azure-5.13]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-azure-5.13
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-azure-5.15
focal

ignored

end of standard support, was ignored [superseded by linux-azure-5.15]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-azure-5.15
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

5.15.0-1007.8~20.04.1
focal

not-affected

5.15.0-1007.8~20.04.1
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-azure-6.2
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-azure-6.2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

ignored

superseded by linux-azure-5.4
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-azure-5.4

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

not-affected

5.4.0-1020.20~18.04.1
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-azure-5.11
focal

ignored

end of standard support, was ignored [superseded by linux-azure-5.11]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-azure-5.11
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-azure-6.5
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-azure-6.5
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

not-affected

6.5.0-1007.7~22.04.1
mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

ignored

superseded by linux-azure-5.3
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-azure-5.3

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-azure-fde-5.15
focal

ignored

end of standard support, was ignored [superseded by linux-azure-fde-5.15]
jammy

not-affected

5.15.0-1019.24.1
mantic

DNE

noble

not-affected

6.8.0-1041.48
trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

5.15.0-1019.24~20.04.1.1
focal

not-affected

5.15.0-1019.24~20.04.1.1
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-azure-fde-6.2
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-azure-fde-6.2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

replaced by linux-azure-6.5
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

replaced by linux-azure-6.5
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

fips-updates/bionic

not-affected

4.15.0-1002.2
fips-updates/focal

not-affected

5.4.0-1022.22+fips1
fips/bionic

not-affected

4.15.0-1002.2
fips/focal

not-affected

5.4.0-1022.22+fips1

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

5.4.0-1007.10
focal

not-affected

5.4.0-1007.10
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

end of life
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

fips-updates/bionic

not-affected

4.15.0-1027.32
fips-updates/focal

not-affected

5.4.0-1026.30
fips-updates/xenial

not-affected

4.4.0-1003.3
fips/bionic

not-affected

4.15.0-1011.12
fips/focal

not-affected

5.4.0-1007.8
fips/xenial

not-affected

4.4.0-1001.1
focal

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

6.8.0-1007.7
esm-infra/bionic

ignored

superseded by linux-gcp-5.3
esm-infra/focal

not-affected

5.4.0-1005.5
esm-infra/xenial

not-affected

4.10.0-1004.4
focal

not-affected

5.4.0-1005.5
jammy

not-affected

5.13.0-1005.6
mantic

not-affected

6.2.0-1005.5
noble

not-affected

6.5.0-1007.7
trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

not-affected

4.15.0-1071.81
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-gcp-5.13
focal

ignored

end of standard support, was ignored [superseded by linux-gcp-5.13]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-gcp-5.13
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-gcp-5.15
focal

ignored

end of standard support, was ignored [superseded by linux-gcp-5.15]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-gcp-5.15
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

5.15.0-1006.9~20.04.1
focal

not-affected

5.15.0-1006.9~20.04.1
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-gcp-6.2
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-gcp-6.2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

ignored

superseded by linux-gcp-5.4
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-gcp-5.4

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

not-affected

5.4.0-1019.19~18.04.2
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-gcp-5.11
focal

ignored

end of standard support, was ignored [superseded by linux-gcp-5.11]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-gcp-5.11
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-gcp-6.5
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-gcp-6.5
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

not-affected

6.5.0-1010.10~22.04.3
mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

fips-updates/bionic

not-affected

4.15.0-2013.14
fips-updates/focal

not-affected

5.4.0-1021.21+fips1
fips/bionic

not-affected

4.15.0-1001.1
fips/focal

not-affected

5.4.0-1021.21+fips1

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

6.8.0-1003.5
esm-infra/focal

ignored

end of kernel support
focal

ignored

end of kernel support
jammy

not-affected

5.15.0-1002.2
mantic

DNE

noble

not-affected

6.8.0-1003.5
trusty

DNE

upstream

released

5.13~rc2
xenial

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

ignored

superseded by linux-gke-5.0
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-gke-5.0

Показывать по

РелизСтатусПримечание
bionic

ignored

superseded by linux-gke-5.3
devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-gke-5.3
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

end of kernel support
focal

ignored

end of kernel support
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

end of life
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

superseded by linux-gke-5.4
devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-gke-5.4
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

ignored

end of kernel support
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

5.4.0-1008.9
focal

not-affected

5.4.0-1008.9
jammy

not-affected

5.15.0-1001.2
mantic

DNE

noble

not-affected

6.8.0-1001.3
trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

5.15.0-1003.5~20.04.2
focal

not-affected

5.15.0-1003.5~20.04.2
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

ignored

end of kernel support
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

ignored

replaced by linux-hwe-5.4
esm-infra/focal

DNE

esm-infra/xenial

not-affected

4.8.0-39.42~16.04.1
focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-hwe-5.13
focal

ignored

end of standard support, was ignored [superseded by linux-hwe-5.13]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-hwe-5.13
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-hwe-5.15
focal

ignored

end of standard support, was ignored [superseded by linux-hwe-5.15]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-hwe-5.15
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

5.15.0-33.34~20.04.1
focal

not-affected

5.15.0-33.34~20.04.1
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-hwe-6.2
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-hwe-6.2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

not-affected

5.4.0-37.41~18.04.1
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-hwe-5.11
focal

ignored

end of standard support, was ignored [superseded by linux-hwe-5.11]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-hwe-5.11
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-hwe-6.5
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-hwe-6.5
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

not-affected

6.5.0-14.14~22.04.1
mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

ignored

superseded by linux-hwe-5.4
esm-infra/focal

DNE

esm-infra/xenial

ignored

superseded by linux-hwe
focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

6.8.0-1005.5
esm-infra/focal

not-affected

5.4.0-1003.4
focal

not-affected

5.4.0-1003.4
jammy

not-affected

5.15.0-1002.2
mantic

ignored

end of kernel support
noble

not-affected

6.5.0-1009.9
trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

5.15.0-1033.36~20.04.1
focal

not-affected

5.15.0-1033.36~20.04.1
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

not-affected

5.4.0-1010.11~18.04.2
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

not-affected

6.8.0-1001.6

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

end of kernel support
focal

ignored

end of kernel support
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

end of life
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

not-affected

5.15.0-1004.6
mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

5.15.0-1003.5~20.04.1
focal

not-affected

5.15.0-1003.5~20.04.1
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

5.4.0-1001.3
focal

not-affected

5.4.0-1001.3
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

not-affected

4.15.0-1002.2
esm-infra/focal

not-affected

5.4.0-1004.4
esm-infra/xenial

not-affected

4.4.0-1004.9
focal

not-affected

5.4.0-1004.4
jammy

not-affected

5.13.0-1004.4
mantic

DNE

noble

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

not-affected

6.5.0-1003.6
noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

6.8.0-31.31.1
esm-infra/focal

DNE

focal

DNE

jammy

not-affected

5.15.0-22.22
mantic

not-affected

6.2.0-1003.3
noble

not-affected

6.5.0-9.9.1
trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

5.15.0-33.34~20.04.1
focal

not-affected

5.15.0-33.34~20.04.1
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-lowlatency-hwe-6.2
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-lowlatency-hwe-6.2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-lowlatency-hwe-6.5
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-lowlatency-hwe-6.5
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

not-affected

6.5.0-14.14.1~22.04.1
mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

not-affected

4.4.0-13.29~14.04.1
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

ignored

end of standard support
trusty/esm

not-affected

4.4.0-13.29~14.04.1

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

not-affected

5.15.0-1005.5
mantic

DNE

noble

not-affected

6.8.0-1007.7
trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-nvidia-6.5
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-nvidia-6.5
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

not-affected

6.5.0-1004.4
mantic

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

not-affected

6.8.0-1008.8~22.04.1
noble

DNE

trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

DNE

noble

not-affected

6.8.0-1009.9.1
trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

ignored

replaced by linux-hwe-5.4
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-oem-5.13
focal

ignored

end of standard support, was ignored [superseded by linux-oem-5.13]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-oem-5.13
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-oem-5.14
focal

ignored

end of standard support, was ignored [superseded by linux-oem-5.14]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-oem-5.14
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

replaced by linux-hwe-5.15
focal

ignored

end of standard support, was ignored [replaced by linux-hwe-5.15]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

replaced by linux-hwe-5.15
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-oem-6.1
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-oem-6.1
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-oem-5.10
focal

ignored

end of standard support, was ignored [superseded by linux-oem-5.10]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-oem-5.10
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-oem-6.1
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-oem-6.1
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-oem-6.5, was needs-triage
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-oem-6.5, was needs-triage
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

not-affected

6.5.0-1003.3
mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

not-affected

6.8.0-1003.3

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

end of life
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

6.8.0-1005.5
esm-infra/bionic

not-affected

4.15.0-1007.9
esm-infra/focal

not-affected

5.4.0-1005.5
esm-infra/xenial

not-affected

4.15.0-1007.9~16.04.1
focal

not-affected

5.4.0-1005.5
jammy

not-affected

5.13.0-1008.10
mantic

not-affected

6.2.0-1003.3
noble

not-affected

6.5.0-1010.10
trusty

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

ignored

superseded by linux-oracle-5.3
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-oracle-5.3

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-oracle-5.13
focal

ignored

end of standard support, was ignored [superseded by linux-oracle-5.13]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-oracle-5.13
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-oracle-5.15
focal

ignored

end of standard support, was ignored [superseded by linux-oracle-5.15]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-oracle-5.15
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

5.15.0-1007.9~20.04.1
focal

not-affected

5.15.0-1007.9~20.04.1
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

ignored

superseded by linux-oracle-5.4
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-oracle-5.4

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

not-affected

5.4.0-1019.19~18.04.1
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-oracle-5.11
focal

ignored

end of standard support, was ignored [superseded by linux-oracle-5.11]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-oracle-5.11
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra-legacy/trusty

DNE

esm-infra/bionic

DNE

esm-infra/focal

DNE

esm-infra/xenial

DNE

focal

DNE

jammy

not-affected

6.5.0-1013.13~22.04.4
mantic

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

6.8.0-1004.4
esm-infra/focal

not-affected

5.4.0-1007.7
focal

not-affected

5.4.0-1007.7
jammy

not-affected

5.13.0-1008.9
mantic

not-affected

6.2.0-1004.5
noble

not-affected

6.5.0-1005.7
trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/bionic

not-affected

5.4.0-1013.13~18.04.1
esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/focal

ignored

replaced by linux-raspi
focal

ignored

end of standard support, was ignored [replaced by linux-raspi]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

replaced by linux-raspi
xenial

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-raspi2-5.4
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

not-affected

6.8.0-31.31.1
esm-infra/focal

ignored

superseded by linux-riscv-5.8
focal

ignored

end of standard support, was ignored [superseded by linux-riscv-5.8]
jammy

ignored

end of kernel support
mantic

not-affected

6.2.0-19.19.1
noble

not-affected

6.5.0-9.9.1
trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-riscv-5.13
focal

ignored

end of standard support, was ignored [superseded by linux-riscv-5.13]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-riscv-5.13
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

5.15.0-1015.17~20.04.1
focal

not-affected

5.15.0-1015.17~20.04.1
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

end of kernel support
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

end of life
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

ignored

superseded by linux-riscv-5.11
focal

ignored

end of standard support, was ignored [superseded by linux-riscv-5.11]
jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-riscv-5.11
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

not-affected

6.5.0-17.17.1.1~22.04.1
mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

end of life
xenial

ignored

end of standard support

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

DNE

mantic

not-affected

6.5.0-1002.3
noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

end of kernel support
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

end of life
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

ignored

superseded by linux-starfive-6.5
mantic

DNE

noble

DNE

trusty

DNE

upstream

ignored

superseded by linux-starfive-6.5
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

DNE

focal

DNE

jammy

not-affected

6.5.0-1007.8~22.04.1
mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-infra/focal

not-affected

5.4.0-1020.24
focal

not-affected

5.4.0-1020.24
jammy

not-affected

5.15.0-1022.26
mantic

DNE

noble

DNE

trusty

DNE

upstream

released

5.13~rc2
xenial

DNE

Показывать по

EPSS

Процентиль: 14%
0.00047
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 5.5
redhat
почти 2 года назад

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always make an attempt to map eVMCS after migration When enlightened VMCS is in use and nested state is migrated with vmx_get_nested_state()/vmx_set_nested_state() KVM can't map evmcs page right away: evmcs gpa is not 'struct kvm_vmx_nested_state_hdr' and we can't read it from VP assist page because userspace may decide to restore HV_X64_MSR_VP_ASSIST_PAGE after restoring nested state (and QEMU, for example, does exactly that). To make sure eVMCS is mapped /vmx_set_nested_state() raises KVM_REQ_GET_NESTED_STATE_PAGES request. Commit f2c7ef3ba955 ("KVM: nSVM: cancel KVM_REQ_GET_NESTED_STATE_PAGES on nested vmexit") added KVM_REQ_GET_NESTED_STATE_PAGES clearing to nested_vmx_vmexit() to make sure MSR permission bitmap is not switched when an immediate exit from L2 to L1 happens right after migration (caused by a pending event, for example). Unfortunately, in the exact same situation we still need to have eV...

CVSS3: 7.8
nvd
почти 2 года назад

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always make an attempt to map eVMCS after migration When enlightened VMCS is in use and nested state is migrated with vmx_get_nested_state()/vmx_set_nested_state() KVM can't map evmcs page right away: evmcs gpa is not 'struct kvm_vmx_nested_state_hdr' and we can't read it from VP assist page because userspace may decide to restore HV_X64_MSR_VP_ASSIST_PAGE after restoring nested state (and QEMU, for example, does exactly that). To make sure eVMCS is mapped /vmx_set_nested_state() raises KVM_REQ_GET_NESTED_STATE_PAGES request. Commit f2c7ef3ba955 ("KVM: nSVM: cancel KVM_REQ_GET_NESTED_STATE_PAGES on nested vmexit") added KVM_REQ_GET_NESTED_STATE_PAGES clearing to nested_vmx_vmexit() to make sure MSR permission bitmap is not switched when an immediate exit from L2 to L1 happens right after migration (caused by a pending event, for example). Unfortunately, in the exact same situation we still need to have eV

CVSS3: 7.8
debian
почти 2 года назад

In the Linux kernel, the following vulnerability has been resolved: K ...

CVSS3: 7.8
github
почти 2 года назад

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always make an attempt to map eVMCS after migration When enlightened VMCS is in use and nested state is migrated with vmx_get_nested_state()/vmx_set_nested_state() KVM can't map evmcs page right away: evmcs gpa is not 'struct kvm_vmx_nested_state_hdr' and we can't read it from VP assist page because userspace may decide to restore HV_X64_MSR_VP_ASSIST_PAGE after restoring nested state (and QEMU, for example, does exactly that). To make sure eVMCS is mapped /vmx_set_nested_state() raises KVM_REQ_GET_NESTED_STATE_PAGES request. Commit f2c7ef3ba955 ("KVM: nSVM: cancel KVM_REQ_GET_NESTED_STATE_PAGES on nested vmexit") added KVM_REQ_GET_NESTED_STATE_PAGES clearing to nested_vmx_vmexit() to make sure MSR permission bitmap is not switched when an immediate exit from L2 to L1 happens right after migration (caused by a pending event, for example). Unfortunately, in the exact same situation we still need to have...

CVSS3: 7.8
fstec
почти 5 лет назад

Уязвимость функции nested_get_evmcs_page() модуля arch/x86/kvm/vmx/nested.c подсистемы виртуализации на платформе x86 ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации.

EPSS

Процентиль: 14%
0.00047
Низкий

7.8 High

CVSS3

Уязвимость CVE-2021-46978