CVEvulnerability
CVE-2021-4032
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-01-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-459
Description
A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvm_free_lapic when a failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with special user privilege to cause a denial of service. This flaw affects kernel versions prior to 5.15 rc7.
Affected configurations
• linux linux kernel (<= 5.14)
• linux linux kernel 5.15
Related
Weakness · CWE (1)
- CWE-459 Incomplete Cleanup weakness
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2027403 Issue Tracking, Patch, Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f7d8a19f9a056a05c5c509fa65af472a322abfee Exploit, Patch, Third Party Advisory
- https://lkml.org/lkml/2021/9/8/587 Exploit, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2027403 Issue Tracking, Patch, Third Party Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f7d8a19f9a056a05c5c509fa65af472a322abfee Exploit, Patch, Third Party Advisory
- https://lkml.org/lkml/2021/9/8/587 Exploit, Third Party Advisory