USN-5082-1

Dashboard / Vulnerabilities / USN-5082-1

USN-5082-1

Summary: linux-oem-5.13 vulnerabilities

Details: Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel allowed a guest VM to disable restrictions on VMLOAD/VMSAVE in a nested guest. An attacker in a guest VM could use this to read or write portions of the host's physical memory. (CVE-2021-3656) Maxim Levitsky discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel did not properly prevent a guest VM from enabling AVIC in nested guest VMs. An attacker in a guest VM could use this to write to portions of the host's physical memory. (CVE-2021-3653) Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A local attacker could use this issue to execute arbitrary code. (CVE-2021-3609)

References: https://ubuntu.com/security/notices/USN-5082-1, https://ubuntu.com/security/CVE-2021-3609, https://ubuntu.com/security/CVE-2021-3653, https://ubuntu.com/security/CVE-2021-3656