CVE-2021-38198

A flaw was found in the Linux kernel, where it incorrectly computes the access permissions of a shadow page. This issue leads to a missing guest protection page fault.

The issue is rated as having Low impact because the issue is not present when hardware-assisted paging (also known as nested paging and Second Level Address Translation) is enabled. Hardware-assisted paging is enabled by default for CPUs that support it. Any realistic real-life virtualization scenario benefits greatly from hardware assisted paging speed up, so deployments without hardware-assisted paging are very rare.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Do not disable hardware-assisted paging (also known as nested paging and Second Level Address Translation) on your hosts. The default is on.