Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)
Description:
This update for the Linux Kernel 4.4.180-94_135 fixes several issues.
The following security issues were fixed:
- CVE-2021-3653: Fixed missing validation of the KVM `int_ctl` VMCB field that would have allowed a malicious L1 guest to enable AVIC support for the L2 guest (bsc#1189420). - CVE-2021-38198: Fixed KVM MMU to use the correct inherited permissions to get shadow page (bsc#1189278).