CVE:CVE-2021-3653
CNNVD:CNNVD-202108-1501
KVM是基于内核的虚拟机。
KVM 的 AMD 代码中存在权限许可和访问控制问题漏洞，该漏洞源于在处理 L1 来宾提供的 VMCB（虚拟机控制块）以生成/处理嵌套来宾 (L2) 时对“int_ctl”的不正确验证。
solution:Upgrade linux linux_kernel to a higher version than 4.4.282,4.9.281,4.14.245,4.19.205,5.4.142,5.10.60,5.13.12,5.14:rc1,5.14:rc2,5.14:rc3,5.14:rc4,5.14:rc5,5.14:rc6,and avoid the version [2.6.30,4.4.282),[4.5,4.9.281),[4.10,4.14.245),[4.15,4.19.205),[4.20,5.4.142),[5.5,5.10.60),[5.11,5.13.12),5.14:rc1,5.14:rc2,5.14:rc3,5.14:rc4,5.14:rc5,5.14:rc6; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0