VYPR
← All advisories
High severity8.8NVD Advisory· Published Feb 18, 2022· Updated Jun 17, 2026

CVE-2021-4093

CVE-2021-4093

Description

A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES). A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction (for example, outs or ins) using the exit reason SVM_EXIT_IOIO. This issue results in a crash of the entire system or a potential guest-to-host escape scenario.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • KVM/KVMllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)
  • Linux/Kernel
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    Range: >=5.11,<5.14.16
  • Red Hat/Enterprise Linux Server
    cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
  • Fedoraproject/Fedora
    cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
  • Canonical/Ubuntu Linux2 versions
    cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*+ 1 more
    • cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:21.10:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.