imPC@ndo IT

Tracker / CVE-2021-29657

CVE-2021-29657

High 7.4

arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD KVM guest can bypass access control on host OS MSRs when there are nested guests, aka CID-a58d9166a756. This occurs because of a TOCTOU race condition associated with a VMCB12 double fetch in nested_svm_vmrun.

Affected products and versions

linux linux_kernel · 5.10 → 5.10.28
linux linux_kernel · 5.11 → 5.11.12

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References