Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-47407

KVM: x86: Handle SRCU initialization failure during page track init

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Handle SRCU initialization failure during page track init Check the return of init_srcu_struct(), which can fail due to OOM, when initializing the page track mechanism. Lack of checking leads to a NULL pointer deref found by a modified syzkaller. [Move the call towards the beginning of kvm_arch_init_vm. - Paolo]

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0eb05bf290cfe8610d9680b49abef37febd1c38a to < deb2949417677649e2413266d7ce8c2ff73952b4affected
  • 0eb05bf290cfe8610d9680b49abef37febd1c38a to < 4664318f73e496cd22c71b10888e75434a123e23affected
  • 0eb05bf290cfe8610d9680b49abef37febd1c38a to < eb7511bf9182292ef1df1082d23039e856d1ddfbaffected

Linux Linux

Default version status: affected

  • 4.6affected
  • 0 to < 4.6unaffected
  • 5.10.71 to ≤ 5.10.*unaffected
  • 5.14.10 to ≤ 5.14.*unaffected
  • 5.15 to ≤ *unaffected

References