CVE:CVE-2021-3656
CNNVD:CNNVD-202108-1497
KVM是基于内核的虚拟机。
KVM 的 AMD 代码中存在安全漏洞，该漏洞源于在处理 L1 来宾提供的 VMCB（虚拟机控制块）以生成/处理嵌套来宾 (L2) 时对“virt_ext”的不正确验证。
solution:Upgrade linux linux_kernel to a higher version than 4.14.245,4.19.205,5.4.142,5.10.60,5.13.12,5.14,5.14:rc1,5.14:rc2,5.14:rc3,5.14:rc4,5.14:rc5,5.14:rc6,and avoid the version [4.13,4.14.245),[4.15,4.19.205),[4.20,5.4.142),[5.5,5.10.60),[5.11,5.13.12),5.14,5.14:rc1,5.14:rc2,5.14:rc3,5.14:rc4,5.14:rc5,5.14:rc6; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade redhat software_collections to a higher version than -; Upgrade redhat openstack to a higher version than 13,and avoid the version 13; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_for_ibm_z_systems to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_linux_for_ibm_z_systems_eus to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_for_power_big_endian to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_for_power_little_endian to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_linux_for_power_little_endian_eus to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_for_real_time to a higher version than 7,8,and avoid the version 7,8; Upgrade redhat enterprise_linux_for_real_time_for_nfv to a higher version than 7,8,and avoid the version 7,8; Upgrade redhat enterprise_linux_for_real_time_for_nfv_tus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_for_real_time_tus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_for_scientific_computing to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.6,7.7,8.2,8.4,and avoid the version 7.6,7.7,8.2,8.4; Upgrade redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions to a higher version than 7.6,8.1,8.2,8.4,and avoid the version 7.6,8.1,8.2,8.4; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.6,7.7,8.2,8.4,and avoid the version 7.6,7.7,8.2,8.4; Upgrade redhat enterprise_linux_server_update_services_for_sap_solutions to a higher version than 7.6,7.7,8.1,8.2,8.4,and avoid the version 7.6,7.7,8.1,8.2,8.4; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat 3scale_api_management to a higher version than 2.0,and avoid the version 2.0; Upgrade redhat codeready_linux_builder to a higher version than -; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0