Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel allowed a guest VM to disable restrictions on VMLOAD/VMSAVE in a nested guest. An attacker in a guest VM could use this to read or write portions of the host's physical memory. (CVE-2021-3656)
Maxim Levitsky discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel did not properly prevent a guest VM from enabling AVIC in nested guest VMs. An attacker in a guest VM could use this to write to portions of the host's physical memory. (CVE-2021-3653)
Norbert Slusarek discovered that the CAN broadcast manger (bcm) protocol implementation in the Linux kernel did not properly initialize memory in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2021-34693)
Murray McAllister discovered that the joystick device interface in the Linux kernel did not properly validate data passed via an ioctl(). A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code on systems with a joystick device registered. (CVE-2021-3612)
It was discovered that the Virtio console implementation in the Linux kernel did not properly validate input lengths in some situations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2021-38160)
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "linux-modules-4.15.0-1123-azure": "4.15.0-1123.136~14.04.1", "linux-tools-4.15.0-1123-azure": "4.15.0-1123.136~14.04.1", "linux-image-unsigned-4.15.0-1123-azure": "4.15.0-1123.136~14.04.1", "linux-azure-headers-4.15.0-1123": "4.15.0-1123.136~14.04.1", "linux-headers-4.15.0-1123-azure": "4.15.0-1123.136~14.04.1", "linux-azure-tools-4.15.0-1123": "4.15.0-1123.136~14.04.1", "linux-image-unsigned-4.15.0-1123-azure-dbgsym": "4.15.0-1123.136~14.04.1", "linux-modules-extra-4.15.0-1123-azure": "4.15.0-1123.136~14.04.1", "linux-azure-cloud-tools-4.15.0-1123": "4.15.0-1123.136~14.04.1", "linux-buildinfo-4.15.0-1123-azure": "4.15.0-1123.136~14.04.1", "linux-cloud-tools-4.15.0-1123-azure": "4.15.0-1123.136~14.04.1" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "linux-aws-hwe-cloud-tools-4.15.0-1111": "4.15.0-1111.118~16.04.1", "linux-tools-4.15.0-1111-aws": "4.15.0-1111.118~16.04.1", "linux-buildinfo-4.15.0-1111-aws": "4.15.0-1111.118~16.04.1", "linux-aws-headers-4.15.0-1111": "4.15.0-1111.118~16.04.1", "linux-aws-hwe-tools-4.15.0-1111": "4.15.0-1111.118~16.04.1", "linux-image-4.15.0-1111-aws-dbgsym": "4.15.0-1111.118~16.04.1", "linux-image-4.15.0-1111-aws": "4.15.0-1111.118~16.04.1", "linux-headers-4.15.0-1111-aws": "4.15.0-1111.118~16.04.1", "linux-modules-4.15.0-1111-aws": "4.15.0-1111.118~16.04.1", "linux-modules-extra-4.15.0-1111-aws": "4.15.0-1111.118~16.04.1", "linux-cloud-tools-4.15.0-1111-aws": "4.15.0-1111.118~16.04.1" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "linux-modules-4.15.0-1123-azure": "4.15.0-1123.136~16.04.1", "linux-tools-4.15.0-1123-azure": "4.15.0-1123.136~16.04.1", "linux-image-unsigned-4.15.0-1123-azure": "4.15.0-1123.136~16.04.1", "linux-azure-headers-4.15.0-1123": "4.15.0-1123.136~16.04.1", "linux-headers-4.15.0-1123-azure": "4.15.0-1123.136~16.04.1", "linux-azure-tools-4.15.0-1123": "4.15.0-1123.136~16.04.1", "linux-image-unsigned-4.15.0-1123-azure-dbgsym": "4.15.0-1123.136~16.04.1", "linux-modules-extra-4.15.0-1123-azure": "4.15.0-1123.136~16.04.1", "linux-azure-cloud-tools-4.15.0-1123": "4.15.0-1123.136~16.04.1", "linux-buildinfo-4.15.0-1123-azure": "4.15.0-1123.136~16.04.1", "linux-cloud-tools-4.15.0-1123-azure": "4.15.0-1123.136~16.04.1" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "fb-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "nic-shared-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "linux-image-unsigned-4.15.0-156-generic-dbgsym": "4.15.0-156.163~16.04.1", "ipmi-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "linux-modules-extra-4.15.0-156-generic": "4.15.0-156.163~16.04.1", "linux-cloud-tools-4.15.0-156-generic": "4.15.0-156.163~16.04.1", "kernel-image-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "linux-hwe-tools-4.15.0-156": "4.15.0-156.163~16.04.1", "nic-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "nfs-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "multipath-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "pata-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "linux-image-unsigned-4.15.0-156-generic": "4.15.0-156.163~16.04.1", "virtio-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "linux-image-unsigned-4.15.0-156-lowlatency-dbgsym": "4.15.0-156.163~16.04.1", "firewire-core-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "crypto-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "dasd-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "fs-secondary-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "vlan-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "pcmcia-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "linux-image-4.15.0-156-generic": "4.15.0-156.163~16.04.1", "floppy-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "linux-hwe-udebs-generic": "4.15.0-156.163~16.04.1", "nic-pcmcia-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "linux-tools-4.15.0-156-lowlatency": "4.15.0-156.163~16.04.1", "linux-headers-4.15.0-156-generic": "4.15.0-156.163~16.04.1", "linux-cloud-tools-4.15.0-156-lowlatency": "4.15.0-156.163~16.04.1", "linux-image-4.15.0-156-generic-dbgsym": "4.15.0-156.163~16.04.1", "md-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "sata-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "linux-modules-4.15.0-156-lowlatency": "4.15.0-156.163~16.04.1", "linux-source-4.15.0": "4.15.0-156.163~16.04.1", "mouse-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "block-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "scsi-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "ppp-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "linux-modules-4.15.0-156-generic": "4.15.0-156.163~16.04.1", "linux-hwe-cloud-tools-4.15.0-156": "4.15.0-156.163~16.04.1", "usb-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "input-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "fat-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "serial-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "storage-core-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "linux-tools-4.15.0-156-generic": "4.15.0-156.163~16.04.1", "linux-buildinfo-4.15.0-156-generic": "4.15.0-156.163~16.04.1", "nic-usb-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "pcmcia-storage-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "parport-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "linux-headers-4.15.0-156-lowlatency": "4.15.0-156.163~16.04.1", "fs-core-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "irda-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "dasd-extra-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "linux-image-unsigned-4.15.0-156-lowlatency": "4.15.0-156.163~16.04.1", "linux-headers-4.15.0-156": "4.15.0-156.163~16.04.1", "plip-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1", "linux-buildinfo-4.15.0-156-lowlatency": "4.15.0-156.163~16.04.1", "message-modules-4.15.0-156-generic-di": "4.15.0-156.163~16.04.1" } ] }
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "linux-headers-4.15.0-1080-oracle": "4.15.0-1080.88~16.04.1", "linux-image-unsigned-4.15.0-1080-oracle": "4.15.0-1080.88~16.04.1", "linux-oracle-headers-4.15.0-1080": "4.15.0-1080.88~16.04.1", "linux-oracle-tools-4.15.0-1080": "4.15.0-1080.88~16.04.1", "linux-modules-extra-4.15.0-1080-oracle": "4.15.0-1080.88~16.04.1", "linux-tools-4.15.0-1080-oracle": "4.15.0-1080.88~16.04.1", "linux-image-unsigned-4.15.0-1080-oracle-dbgsym": "4.15.0-1080.88~16.04.1", "linux-buildinfo-4.15.0-1080-oracle": "4.15.0-1080.88~16.04.1", "linux-modules-4.15.0-1080-oracle": "4.15.0-1080.88~16.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "fb-modules-4.15.0-156-generic-di": "4.15.0-156.163", "nic-shared-modules-4.15.0-156-generic-di": "4.15.0-156.163", "kernel-image-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "linux-image-unsigned-4.15.0-156-generic-dbgsym": "4.15.0-156.163", "mouse-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "ipmi-modules-4.15.0-156-generic-di": "4.15.0-156.163", "linux-modules-extra-4.15.0-156-generic": "4.15.0-156.163", "linux-cloud-tools-4.15.0-156-generic": "4.15.0-156.163", "kernel-image-4.15.0-156-generic-di": "4.15.0-156.163", "linux-udebs-generic": "4.15.0-156.163", "multipath-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "irda-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "nic-modules-4.15.0-156-generic-di": "4.15.0-156.163", "nic-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "multipath-modules-4.15.0-156-generic-di": "4.15.0-156.163", "pata-modules-4.15.0-156-generic-di": "4.15.0-156.163", "ipmi-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "linux-image-unsigned-4.15.0-156-generic": "4.15.0-156.163", "linux-tools-4.15.0-156": "4.15.0-156.163", "virtio-modules-4.15.0-156-generic-di": "4.15.0-156.163", "scsi-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "linux-image-unsigned-4.15.0-156-lowlatency-dbgsym": "4.15.0-156.163", "nfs-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "firewire-core-modules-4.15.0-156-generic-di": "4.15.0-156.163", "linux-image-4.15.0-156-generic-lpae-dbgsym": "4.15.0-156.163", "nfs-modules-4.15.0-156-generic-di": "4.15.0-156.163", "linux-tools-4.15.0-156-generic-lpae": "4.15.0-156.163", "storage-core-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "input-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "nic-shared-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "crypto-modules-4.15.0-156-generic-di": "4.15.0-156.163", "fs-core-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "dasd-modules-4.15.0-156-generic-di": "4.15.0-156.163", "fs-secondary-modules-4.15.0-156-generic-di": "4.15.0-156.163", "vlan-modules-4.15.0-156-generic-di": "4.15.0-156.163", "pcmcia-modules-4.15.0-156-generic-di": "4.15.0-156.163", "crypto-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "linux-image-4.15.0-156-generic-lpae": "4.15.0-156.163", "linux-image-4.15.0-156-generic": "4.15.0-156.163", "floppy-modules-4.15.0-156-generic-di": "4.15.0-156.163", "linux-headers-4.15.0-156-generic-lpae": "4.15.0-156.163", "nic-pcmcia-modules-4.15.0-156-generic-di": "4.15.0-156.163", "linux-tools-4.15.0-156-lowlatency": "4.15.0-156.163", "linux-headers-4.15.0-156-generic": "4.15.0-156.163", "linux-modules-4.15.0-156-generic-lpae": "4.15.0-156.163", "linux-cloud-tools-4.15.0-156-lowlatency": "4.15.0-156.163", "usb-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "linux-image-4.15.0-156-generic-dbgsym": "4.15.0-156.163", "linux-cloud-tools-common": "4.15.0-156.163", "fs-secondary-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "linux-modules-4.15.0-156-lowlatency": "4.15.0-156.163", "md-modules-4.15.0-156-generic-di": "4.15.0-156.163", "linux-buildinfo-4.15.0-156-generic-lpae": "4.15.0-156.163", "linux-cloud-tools-4.15.0-156": "4.15.0-156.163", "mouse-modules-4.15.0-156-generic-di": "4.15.0-156.163", "linux-libc-dev": "4.15.0-156.163", "linux-doc": "4.15.0-156.163", "block-modules-4.15.0-156-generic-di": "4.15.0-156.163", "sata-modules-4.15.0-156-generic-di": "4.15.0-156.163", "block-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "plip-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "linux-modules-4.15.0-156-generic": "4.15.0-156.163", "nic-usb-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "ppp-modules-4.15.0-156-generic-di": "4.15.0-156.163", "scsi-modules-4.15.0-156-generic-di": "4.15.0-156.163", "linux-image-4.15.0-156-lowlatency": "4.15.0-156.163", "sata-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "linux-source-4.15.0": "4.15.0-156.163", "usb-modules-4.15.0-156-generic-di": "4.15.0-156.163", "linux-image-4.15.0-156-lowlatency-dbgsym": "4.15.0-156.163", "input-modules-4.15.0-156-generic-di": "4.15.0-156.163", "fat-modules-4.15.0-156-generic-di": "4.15.0-156.163", "md-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "linux-tools-host": "4.15.0-156.163", "serial-modules-4.15.0-156-generic-di": "4.15.0-156.163", "storage-core-modules-4.15.0-156-generic-di": "4.15.0-156.163", "fat-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "linux-tools-4.15.0-156-generic": "4.15.0-156.163", "linux-buildinfo-4.15.0-156-generic": "4.15.0-156.163", "nic-usb-modules-4.15.0-156-generic-di": "4.15.0-156.163", "parport-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "pcmcia-storage-modules-4.15.0-156-generic-di": "4.15.0-156.163", "ppp-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "linux-udebs-generic-lpae": "4.15.0-156.163", "linux-image-unsigned-4.15.0-156-lowlatency": "4.15.0-156.163", "irda-modules-4.15.0-156-generic-di": "4.15.0-156.163", "fs-core-modules-4.15.0-156-generic-di": "4.15.0-156.163", "linux-headers-4.15.0-156-lowlatency": "4.15.0-156.163", "dasd-extra-modules-4.15.0-156-generic-di": "4.15.0-156.163", "linux-tools-common": "4.15.0-156.163", "linux-headers-4.15.0-156": "4.15.0-156.163", "parport-modules-4.15.0-156-generic-di": "4.15.0-156.163", "plip-modules-4.15.0-156-generic-di": "4.15.0-156.163", "vlan-modules-4.15.0-156-generic-lpae-di": "4.15.0-156.163", "linux-buildinfo-4.15.0-156-lowlatency": "4.15.0-156.163", "message-modules-4.15.0-156-generic-di": "4.15.0-156.163" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-aws-cloud-tools-4.15.0-1111": "4.15.0-1111.118", "linux-tools-4.15.0-1111-aws": "4.15.0-1111.118", "linux-buildinfo-4.15.0-1111-aws": "4.15.0-1111.118", "linux-aws-headers-4.15.0-1111": "4.15.0-1111.118", "linux-image-4.15.0-1111-aws-dbgsym": "4.15.0-1111.118", "linux-image-4.15.0-1111-aws": "4.15.0-1111.118", "linux-headers-4.15.0-1111-aws": "4.15.0-1111.118", "linux-modules-4.15.0-1111-aws": "4.15.0-1111.118", "linux-modules-extra-4.15.0-1111-aws": "4.15.0-1111.118", "linux-cloud-tools-4.15.0-1111-aws": "4.15.0-1111.118", "linux-aws-tools-4.15.0-1111": "4.15.0-1111.118" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-modules-4.15.0-1123-azure": "4.15.0-1123.136", "linux-azure-4.15-tools-4.15.0-1123": "4.15.0-1123.136", "linux-tools-4.15.0-1123-azure": "4.15.0-1123.136", "linux-image-unsigned-4.15.0-1123-azure": "4.15.0-1123.136", "linux-modules-extra-4.15.0-1123-azure": "4.15.0-1123.136", "linux-azure-4.15-cloud-tools-4.15.0-1123": "4.15.0-1123.136", "linux-headers-4.15.0-1123-azure": "4.15.0-1123.136", "linux-image-unsigned-4.15.0-1123-azure-dbgsym": "4.15.0-1123.136", "linux-azure-4.15-headers-4.15.0-1123": "4.15.0-1123.136", "linux-buildinfo-4.15.0-1123-azure": "4.15.0-1123.136", "linux-cloud-tools-4.15.0-1123-azure": "4.15.0-1123.136" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-image-unsigned-4.15.0-1027-dell300x": "4.15.0-1027.32", "linux-dell300x-headers-4.15.0-1027": "4.15.0-1027.32", "linux-buildinfo-4.15.0-1027-dell300x": "4.15.0-1027.32", "linux-headers-4.15.0-1027-dell300x": "4.15.0-1027.32", "linux-image-unsigned-4.15.0-1027-dell300x-dbgsym": "4.15.0-1027.32", "linux-tools-4.15.0-1027-dell300x": "4.15.0-1027.32", "linux-modules-4.15.0-1027-dell300x": "4.15.0-1027.32", "linux-dell300x-tools-4.15.0-1027": "4.15.0-1027.32" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-buildinfo-4.15.0-1099-kvm": "4.15.0-1099.101", "linux-tools-4.15.0-1099-kvm": "4.15.0-1099.101", "linux-kvm-headers-4.15.0-1099": "4.15.0-1099.101", "linux-image-4.15.0-1099-kvm": "4.15.0-1099.101", "linux-image-4.15.0-1099-kvm-dbgsym": "4.15.0-1099.101", "linux-kvm-tools-4.15.0-1099": "4.15.0-1099.101", "linux-modules-4.15.0-1099-kvm": "4.15.0-1099.101", "linux-headers-4.15.0-1099-kvm": "4.15.0-1099.101" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-headers-4.15.0-1080-oracle": "4.15.0-1080.88", "linux-image-unsigned-4.15.0-1080-oracle": "4.15.0-1080.88", "linux-oracle-headers-4.15.0-1080": "4.15.0-1080.88", "linux-oracle-tools-4.15.0-1080": "4.15.0-1080.88", "linux-modules-extra-4.15.0-1080-oracle": "4.15.0-1080.88", "linux-tools-4.15.0-1080-oracle": "4.15.0-1080.88", "linux-image-unsigned-4.15.0-1080-oracle-dbgsym": "4.15.0-1080.88", "linux-buildinfo-4.15.0-1080-oracle": "4.15.0-1080.88", "linux-modules-4.15.0-1080-oracle": "4.15.0-1080.88" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-snapdragon-headers-4.15.0-1112": "4.15.0-1112.121", "linux-image-4.15.0-1112-snapdragon-dbgsym": "4.15.0-1112.121", "linux-buildinfo-4.15.0-1112-snapdragon": "4.15.0-1112.121", "linux-snapdragon-tools-4.15.0-1112": "4.15.0-1112.121", "linux-tools-4.15.0-1112-snapdragon": "4.15.0-1112.121", "linux-headers-4.15.0-1112-snapdragon": "4.15.0-1112.121", "linux-image-4.15.0-1112-snapdragon": "4.15.0-1112.121", "linux-modules-4.15.0-1112-snapdragon": "4.15.0-1112.121" } ] }