Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3)
Details
This update for the Linux Kernel 4.4.180-94_130 fixes several issues.
The following security issues were fixed:
CVE-2021-3653: Fixed missing validation of the KVM int_ctl VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420).
CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).