cve.bz

CVE-2021-29657

7.4 highEPSS 0.4%

High (7.4) in linux linux kernel. EPSS 0.4% chance of exploitation in the next 30 days.

arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD KVM guest can bypass access control on host OS MSRs when there are nested guests, aka CID-a58d9166a756. This occurs because of a TOCTOU race condition associated with a VMCB12 double fetch in nested_svm_vmrun.

Severity

CVSS 3.1

7.4 high
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWEs
CWE-367, CWE-416
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON